-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello David,

I like your idea -- improves efficiency by providing a "stop" point,
while maintaining the ability to reasonably accumulate hits. Thanks.

Bob Menschel

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBP6xw6JebK8E4qh1HEQLrwQCgrDC8yr5fPG3u/1GofuZHKIertSkAoLoJ
CUiv127YWMaPGFMRVh02t8s1
=FI7w
-----END PGP SIGNATURE-----


Friday, November 7, 2003, 7:27:24 PM, you wrote:

DBF> On Fri, 7 Nov 2003, Robert Menschel wrote:

>> Or better: what if we specified in the rule a maximum score to accumulate
>> to? Maybe something like:
>>
>> accumbody  T_SAMPLE  /(?:word1|word2|word3|word4|word5)/i,max=2.5
>> describe   T_SAMPLE  Message has medical words frequently used in spam
>> score      T_SAMPLE  0.5
>>
>> Each time any of the five words was used, it'd score 0.5, to a maximum
>> score of 2.5. No matter how long the message was, this rule could not by
>> itself cause an FP, and would work in conjunction only with other rules
>> to flag something as spam.

DBF> A slight modification of the above idea, rather than 'max=2.5' have
DBF> 'maxhits=5'. IE that particular rule fires no more than 5 times and then
DBF> the matching engine can drop it and move on to the next rule.

DBF> The final score would be 'nhits' * score. That way the matching engine
DBF> does not need to worry about any score calculations, just tallying up
DBF> number of matches.
DBF> There should also be a default implicit 'maxhits' value to keep the
DBF> matching process moving along and not slow things down too much. ;)




-- 
Best regards,
 Robert                            mailto:[EMAIL PROTECTED]




-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to