SA Bugzilla – Bug 1025
proposed RATWARE tests
Last modified: 2002-09-26 17:22:15 UTC
now in CVS in 70_cvs_rules_under_test.cf If you don't like any of these because they are supposedly not RATWARE, let's see the statistics. :-) # results for quinlan: # 0.333 1.023 0.000 1.00 0.77 1.00 T_RATWARE_CDO header T_RATWARE_CDO X-Mailer =~ /Microsoft CDO for Windows 2000/ describe T_RATWARE_CDO Sent from "Microsoft CDO for Windows 2000" score T_RATWARE_CDO 1.0 # results for quinlan: # 0.421 1.292 0.000 1.00 0.79 1.00 T_RATWARE_EMWAC header T_RATWARE_EMWAC Received =~ /EMWAC SMTPRS/ describe T_RATWARE_EMWAC Sent via a relay running "EMWAC SMTPRS" score T_RATWARE_EMWAC 1.0 # results for quinlan: # 0.368 1.131 0.000 1.00 0.78 1.00 T_RATWARE_THEBAT header T_RATWARE_THEBAT X-Mailer =~ /The Bat/ describe T_RATWARE_THEBAT Sent from "The Bat" score T_RATWARE_THEBAT 1.0
Please DON'T include The Bat! This will mark any mail sent by my family and some others I know as spam. TB is no RATWARE; it's just a damn good Windows mailer with an excellent template feature and a not-so-good scripting engine (that's probably why it's used by so many spammers). OVERALL% SPAM% NONSPAM% S/O RANK SCORE NAME 14487 533 13954 0.04 0.00 0.00 (all messages) 100.000 3.679 96.321 0.04 0.00 0.00 (all messages as %) 4.328 3.189 4.372 0.42 0.28 0.30 USER_AGENT_THEBAT
OVERALL% SPAM% NONSPAM% S/O RANK SCORE NAME 19311 7317 11994 0.38 0.00 0.00 (all messages) 100.000 37.890 62.110 0.38 0.00 0.00 (all messages as %) 0.321 0.834 0.008 0.99 0.73 1.00 T_RATWARE_EMWAC 0.694 1.695 0.083 0.95 0.60 1.00 T_RATWARE_THEBAT 0.145 0.205 0.108 0.65 0.38 1.00 T_RATWARE_CDO CDO doesn't do well for me, but the other two look right.
prompted RATWARE_EMWAC removed RATWARE_CDO and RATWARE_THEBAT fixed