You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Lucas Albers <ad...@cs.montana.edu> on 2004/02/17 08:11:15 UTC
statistical false postive rate at various spam scores
Assuming you are using completelly stock SA with network tests, and
bayesian filters turned on.
What is your level of false positive for the following rejection rates?
How could I determine this?
Would the GA masscheck runs tell me this?
5,
10,
13,
20,
--
Luke Computer Science System Administrator
Security Administrator,College of Engineering
Montana State University-Bozeman,Montana
RE: This doesn't get picked up
Posted by Andrew Heath <an...@bluetongue.com>.
There are a number of ways to check this - I received the same email and
it was picked up today using the weeds.cf from
http://www.emtinc.net/includes/weeds.cf
More information is at http://www.emtinc.net/spamhammers.htm
I recommend using backhair.cf, weeds.cf and chickenpox.cf - these have
assisted us greatly just even having installed these today - stops a lot
of the funky html tag comments :-)
Andrew
> -----Original Message-----
> From: Danie Marais [mailto:danie.marais@attix5.com]
> Sent: Tuesday, 17 February 2004 6:27 PM
> To: spamassassin-users@incubator.apache.org
> Subject: This doesn't get picked up
>
>
> Hi,
>
> I got a spam message yesterday with the following text
>
> "Discover the new winning sexual erection pill!
> This medication picks up where Viagra stops."
>
> But 'viagra' was not picked up. However, when I look at the
> message source I see this:
>
> <html>
> <body>
> Disco<eqkolpb>ver the n</nyvakro>ew winning
> sexual
>  erection pil
> l!<br>
> This
> medication pi
> cks
>  up where Via&#
> 103ra
>  stops.<br><br>
> Only $3 PER DOSE
> <br><br>
> <a
> href="http://www.cnbroastca
> st.com
> /c2/index.php?AFF_ID=&#
> 100m5&#
> 54"> Get your free
>  prescriptio
> 0 NO&
> #87!</a>
> <br><br><br>
> .
> .
> .
>
>
>
>
> Is there a simple way of catching this apprach?
>
> Danie Marais
>
Re: This doesn't get picked up
Posted by Danie Marais <da...@attix5.com>.
Thanks for that, Jennifer
I see how this is supposed to work, but I have placed the weeds.cf file in
/etc/mail/spamassassin and made sure it has read access for everybody.
I then ran
spamassassin < mymessage.eml > result.txt
And the rules were not applied. I have attached the message if you want to
verify. Maybe it's just me being stupid, but my other rulesets like
backhair and chickenpox applied in the same fashion work just fine.
Danie
----- Original Message -----
From: "jennifer" <je...@emtinc.net>
To: "'Danie Marais'" <da...@attix5.com>;
<sp...@incubator.apache.org>
Sent: Tuesday, February 17, 2004 4:27 PM
Subject: RE: This doesn't get picked up
>
> > Hi,
> >
> > I got a spam message yesterday with the following text
> >
> > "Discover the new winning sexual erection pill!
> > This medication picks up where Viagra stops."
> >
> > But 'viagra' was not picked up. However, when I look at the
> > message source
> > I see this:
> >
> > <html>
> > <body>
> > Disco<eqkolpb>ver the n</nyvakro>ew winning
> > sexual
> >  erection pil
> > l!<br>
> > This
> > medication pi
> > cks
> >  up where Via&#
> > 103ra
> >  stops.<br><br>
> > Only $3 PER DOSE
> > <br><br>
> > <a
> > href="http://www.cnbroastca
> > st.com
> > /c2/index.php?AFF_ID=&#
> > 100m5&#
> > 54">
> > Get your free
> >  prescriptio
> > 0 NO&
> > #87!</a>
> > <br><br><br>
> > .
> > .
> > .
> >
> >
> >
> >
> > Is there a simple way of catching this apprach?
>
> The Weeds Set (not weeds2)
>
> http://www.emtinc.net/spamhammers.htm
>
> Jennifer
>
> >
> > Danie Marais
> >
> >
RE: This doesn't get picked up
Posted by jennifer <je...@emtinc.net>.
> Hi,
>
> I got a spam message yesterday with the following text
>
> "Discover the new winning sexual erection pill!
> This medication picks up where Viagra stops."
>
> But 'viagra' was not picked up. However, when I look at the
> message source
> I see this:
>
> <html>
> <body>
> Disco<eqkolpb>ver the n</nyvakro>ew winning
> sexual
>  erection pil
> l!<br>
> This
> medication pi
> cks
>  up where Via&#
> 103ra
>  stops.<br><br>
> Only $3 PER DOSE
> <br><br>
> <a
> href="http://www.cnbroastca
> st.com
> /c2/index.php?AFF_ID=&#
> 100m5&#
> 54">
> Get your free
>  prescriptio
> 0 NO&
> #87!</a>
> <br><br><br>
> .
> .
> .
>
>
>
>
> Is there a simple way of catching this apprach?
The Weeds Set (not weeds2)
http://www.emtinc.net/spamhammers.htm
Jennifer
>
> Danie Marais
>
>
This doesn't get picked up
Posted by Danie Marais <da...@attix5.com>.
Hi,
I got a spam message yesterday with the following text
"Discover the new winning sexual erection pill!
This medication picks up where Viagra stops."
But 'viagra' was not picked up. However, when I look at the message source
I see this:
<html>
<body>
Disco<eqkolpb>ver the n</nyvakro>ew winning sexual
 erection pill!<br>
This
medication picks
 up where Viagra
 stops.<br><br>
Only $3 PER DOSE
<br><br>
<a
href="http://www.cnbroastcast.com
/c2/index.php?AFF_ID=dm5&#
54">
Get your free
 prescription NO&
#87!</a>
<br><br><br>
.
.
.
Is there a simple way of catching this apprach?
Danie Marais
Re: statistical false postive rate at various spam scores
Posted by Theo Van Dinter <fe...@kluge.net>.
On Tue, Feb 17, 2004 at 12:11:15AM -0700, Lucas Albers wrote:
> Assuming you are using completelly stock SA with network tests, and
> bayesian filters turned on.
> What is your level of false positive for the following rejection rates?
> How could I determine this?
Read the STATISTICS* files in the rules directory of the tarball.
> Would the GA masscheck runs tell me this?
> 5,
> 10,
> 13,
> 20,
The GA output would. :) (as seen in the files mentioned above)
--
Randomly Generated Tagline:
Alton Brown: Don't thank me, Chuck. I'm only here because a bet's a bet.
Patty: Ha. I guess you didn't know about Chucky being National Junior
Wacky Golf Champion four years running.
AB: No. I regrettably let my Wacky Golf Weekly expire.
- Good Eats, "Squid Pro Quo"