procmail
[Top] [All Lists]

Re: Recipe Optimization.

2004-03-04 06:57:36
At 16:00 2004-03-03 -0500, David Stone wrote:
I can think of one easy optimization:

:0
* B ?? ()\/.*(biz|info)
{
  LOG="Bodyspam: spamdomain $MATCH in the body of the message $NL"
  :0:
  $SPAM
}

That's a bit reactive.  There are plenty of legitimate sites with .biz,
because the .(com|net|org) were already taken.

See below.

Unless you correspond with any US schools or state instutions, you
could probably also add us to that list safely.

.us was peddled heavily for personal use.  I know several people (not
particularly net-savvy, but most certainly not marketers or spammers --
just regular folk) who have .us domains for their personal websites.

Nevermind that the rule would blast mere _references_ to certain government
sites:

        http://www.state.ma.us/consumer/Pubs/usedcar.htm

Or of people emailing from (government) work addresses on public mailing
lists (unless you're filtering this on only stuff which doesn't come
through lists).

That's why I pefixed the comment with "if".  Personnally, I have yet to
receive a single legitimate email referencing a .biz, .info, or .us
web site, but I can give you about a 1,000 emails out of my junk folder
peddling viagra etc from such domains.  I do have some correspondants
who work in .us institutions, but they don't send personal email from
those addresses.

Actually, my usual approach to dealing with such tests is to add an
X-SpamTest header, and run a scoring recipe.  I have a SPAMTOLERANCE
variable which can be adjusted, depending on how draconian I'm feeling.

When I'm trying a new recipe, I use an X-Warning: header instead, which
isn't counted in the score.  That way, I can monitor the performance of
the test on my mail for a month or so, and decide whether the test is
working acceptably on my email.

Would you feel happier if I added a retrospective, "YMMV"? ;)

Cheers,

Dave Stone



_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>