On Wed, 18 Feb 2004, Robert Menschel <[EMAIL PROTECTED]> wrote:

> BA> header   T_LCASED_XMAILER X-Mailer =~ /^[a-z ]*$/
> BA> describe T_LCASED_XMAILER X-Mailer contains only lowercase words
> BA> score    T_LCASED_XMAILER 0.5
> 
> T_LCASED_XMAILER -- 34193s/5681h of 100794 corpus (82099s/18695h) 02/17/04
> 
> Hits 30% of my ham.

You know, this has been discussed a lot on the list already (search the
archive for "X-Mailer"); why reinvent the wheel?  Here's the rule I'm
using now, based on one that was posted weeks ago.

# X-Mailer handling
# Note that one person reported FP on "X-Mailer: webmail.delfi.lt"
# so we include "." after "^A-Z0-9"

header BCS_XMAILERBOGUS       X-Mailer =~ /^[a-z][^A-Z0-9.]*$/
describe BCS_XMAILERBOGUS     X-Mailer has NO uppercase letters, numbers, dots
score BCS_XMAILERBOGUS        2.0

-- 
Brent J. Nordquist <[EMAIL PROTECTED]> N0BJN
Other contact information: http://kepler.acns.bethel.edu/~bjn/contact.html

Reply via email to