Hello John,
Friday, March 26, 2004, 11:59:58 AM, you wrote:
JH> On Fri, 2004-03-26 at 10:27, JC wrote:
>> Should X-Company_ID and X-Campaign be considered definate spam-sign?
JH> describe SPAMMY_HEADER_01 ...
JH> comments solicited.
Fri Mar 26 23:25:41 PST 2004 -- masscheck.23.sh -- beginning test of
41.spammy_headers.cf
Section 1 -- Emails flagged as spam
Spam identified as spam by these rules: 0 of 98981
Ham identified as spam by these rules: 0 of 20339
Section 2 -- Rules tested
# Subject: Re: Help with a rule
# From: John Hardin <[EMAIL PROTECTED]>
# To: SpamAssassin list <[EMAIL PROTECTED]>
# Date: Fri, 26 Mar 2004 11:59:58 -0800
describe SPAMMY_HEADER_01 Has headers only spammers use
header SPAMMY_HEADER_01 exists:X-Find
score SPAMMY_HEADER_01 1.00
describe SPAMMY_HEADER_02 Has headers only spammers use
header SPAMMY_HEADER_02 exists:X-SP-Track-ID
score SPAMMY_HEADER_02 1.00
describe SPAMMY_HEADER_03 Has headers only spammers use
header SPAMMY_HEADER_03 exists:X-Encoding-Version
score SPAMMY_HEADER_03 1.00
describe SPAMMY_HEADER_04 Has headers only spammers use
header SPAMMY_HEADER_04 exists:X-Contact
score SPAMMY_HEADER_04 1.00
describe SPAMMY_HEADER_05 Has headers only spammers use
header SPAMMY_HEADER_05 exists:X-LIDCode
score SPAMMY_HEADER_05 1.00
describe SPAMMY_HEADER_06 Has headers only spammers use
header SPAMMY_HEADER_06 exists:X-TID
score SPAMMY_HEADER_06 1.00
describe SPAMMY_HEADER_07 Has headers only spammers use
header SPAMMY_HEADER_07 exists:X-Campaign
score SPAMMY_HEADER_07 1.00
describe SPAMMY_HEADER_08 Has headers only spammers use
header SPAMMY_HEADER_08 Content-Transfer-Encoding =~ /^binary$/
score SPAMMY_HEADER_08 1.00
Section 3 -- Frequencies Log
(First numeric frequencies, followed by percentage frequencies)
OVERALL SPAM HAM S/O SCORE NAME
119320 98981 20339 0.830 0.00 0.00 (all messages)
64 64 0 1.000 1.00 1.00 SPAMMY_HEADER_02
19 19 0 1.000 1.00 1.00 SPAMMY_HEADER_07
11 11 0 1.000 1.00 1.00 SPAMMY_HEADER_04
0 0 0 0.500 0.08 1.00 SPAMMY_HEADER_01
0 0 0 0.500 0.08 1.00 SPAMMY_HEADER_05
0 0 0 0.500 0.08 1.00 SPAMMY_HEADER_06
0 0 0 0.500 0.08 1.00 SPAMMY_HEADER_03
46 34 12 0.368 0.00 1.00 SPAMMY_HEADER_08
OVERALL% SPAM% HAM% S/O RANK SCORE NAME
119320 98981 20339 0.830 0.00 0.00 (all messages)
100.000 82.9542 17.0458 0.830 0.00 0.00 (all messages as %)
0.054 0.0647 0.0000 1.000 1.00 1.00 SPAMMY_HEADER_02
0.016 0.0192 0.0000 1.000 1.00 1.00 SPAMMY_HEADER_07
0.009 0.0111 0.0000 1.000 1.00 1.00 SPAMMY_HEADER_04
0.000 0.0000 0.0000 0.500 0.08 1.00 SPAMMY_HEADER_01
0.000 0.0000 0.0000 0.500 0.08 1.00 SPAMMY_HEADER_05
0.000 0.0000 0.0000 0.500 0.08 1.00 SPAMMY_HEADER_06
0.000 0.0000 0.0000 0.500 0.08 1.00 SPAMMY_HEADER_03
0.039 0.0344 0.0590 0.368 0.00 1.00 SPAMMY_HEADER_08
Section 4 -- Recommended Scores and Hit Log
Required Hits = 5
SPAMMY_HEADER_01 -- 0s/0h of 119320 corpus (98981s/20339h) 03/26/04
SPAMMY_HEADER_01 -- suggested score: 0.027 (of 5)
SPAMMY_HEADER_02 -- 64s/0h of 119320 corpus (98981s/20339h) 03/26/04
SPAMMY_HEADER_02 -- suggested score: 0.911 (of 5)
SPAMMY_HEADER_03 -- 0s/0h of 119320 corpus (98981s/20339h) 03/26/04
SPAMMY_HEADER_03 -- suggested score: 0.027 (of 5)
SPAMMY_HEADER_04 -- 11s/0h of 119320 corpus (98981s/20339h) 03/26/04
SPAMMY_HEADER_04 -- suggested score: 0.616 (of 5)
SPAMMY_HEADER_05 -- 0s/0h of 119320 corpus (98981s/20339h) 03/26/04
SPAMMY_HEADER_05 -- suggested score: 0.027 (of 5)
SPAMMY_HEADER_06 -- 0s/0h of 119320 corpus (98981s/20339h) 03/26/04
SPAMMY_HEADER_06 -- suggested score: 0.027 (of 5)
SPAMMY_HEADER_07 -- 19s/0h of 119320 corpus (98981s/20339h) 03/26/04
SPAMMY_HEADER_07 -- suggested score: 0.661 (of 5)
SPAMMY_HEADER_08 -- 34s/12h of 119320 corpus (98981s/20339h) 03/26/04
SPAMMY_HEADER_08 -- suggested score: 0.145 (of 5)
Ham:
- NetMechanic <[EMAIL PROTECTED]>
- NetMechanic <[EMAIL PROTECTED]>
- [EMAIL PROTECTED] (online software purchase confirmation)
- Northern California for Kerry <[EMAIL PROTECTED]>
- Crafter's Choice <[EMAIL PROTECTED]>
- UComics Postcard
- [EMAIL PROTECTED] (TopHosts.Com) (subscription request confirmation)
- ADDR.com Sales <[EMAIL PROTECTED]> (email autoresponse)
- personal email sent through bigmailbox.com
Sat Mar 27 00:15:23 PST 2004 -- masscheck.23.sh -- completed test of
41.spammy_headers.cf
