On Tue, 13 Jan 2004, Dallas L. Engelken wrote: > okay, so i did... i see no reason to use these rules, unless this > becomes a common tactic. > > OVERALL SPAM HAM S/O SCORE NAME > 10970 6083 4887 0.555 0.00 0.00 (all messages) > 2 2 0 1.000 1.00 1.00 JAVASCRIPT_ENCODING_2 > 18 16 2 0.865 0.60 1.00 JAVASCRIPT_ENCODING_1 > 0 0 0 0.500 0.00 1.00 JAVASCRIPT_ENCODING
At issue here is that the ultimate spam is actually generated by a combination of the two arrays, not just by one, so looking for "keywords" in one array is not sufficient. Personally, I block *everything*, by policy, that has *any* executable code -- including javascript. Executable code has no place in e-mail. YMMV, but that's *my* take on the matter. Cheers. +------------------------------------------------+---------------------+ | Carl Richard Friend (UNIX Sysadmin) | West Boylston | | Minicomputer Collector / Enthusiast | Massachusetts, USA | | mailto:[EMAIL PROTECTED] +---------------------+ | http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W | +------------------------------------------------+---------------------+ ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
