Full Disclosure mailing list archives

Re: Fwd: this address is no longer available


From: Dmitry Alyabyev <dimitry () al org ua>
Date: Wed, 14 May 2003 11:48:02 +0300

Indeed you should customize score based on your own mails.
I've corrected scores of about 30 rules and now I'm happy with required_hits=5  
and get only 1..2 false positives and 5..10 not-recognized spam messages from 
about 300 messages a day.

-- 
Dimitry

On Wednesday 14 May 2003 03:14, David Hane wrote:
I had the same problem with the 5 setting early on too. My problem is that
I receive many email from foreign users. The language settings were killing
me due to the high rating (4 I think). Once I turned that test off my 5
setting has been 100% correct.

I would check the false positive messages then adjust the tests that are
giving you problems. Either disable them or lower their score.

Dave Hane

On Tuesday 13 May 2003 16:09, Nexus wrote:
----- Original Message -----
From: "Schmehl, Paul L" <pauls () utdallas edu>
To: "Vision Through Sound" <echolation () hushmail com>;
<full-disclosure () lists netsys com>
Sent: Tuesday, May 13, 2003 11:01 PM
Subject: RE: [Full-disclosure] Fwd: this address is no longer available

Setting SpamAssassin to trigger at 5.0 is pretty silly IMO.  You'll get
a ton of false positives.

Having used it for about a month, I have 438 spams correctly identified
with 2 false positives - one being the start of this thread due to the
example spam messsage, the other being someone asking my advice on a scam
email.   I can live with those figures (and it's set to 5 as well).
YMMV of course.

Cheers.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: