Bug 495 - Updated better new rule - ACT NOW
Summary: Updated better new rule - ACT NOW
Status: RESOLVED FIXED
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 2.31
Hardware: Other other
: P2 enhancement
Target Milestone: ---
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-06-24 10:27 UTC by Marc Perkel
Modified: 2002-12-13 06:23 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marc Perkel 2002-06-24 10:27:14 UTC 
body ACT_NOW			/A(?i:ct) N(?i:ow)|D[Oo].{0.5} H(?i:esitate)|S(?i:tart now)|NOW/
describe ACT_NOW		Act Now! Don't Hesitate!

Here's an interesting experiment to see if this catches spam with less false
positives. I think that in spam - all "ACT NOW" at least has some capitalization.

Feedback is appreciated.
Comment 1 Duncan Findlay 2002-06-24 19:21:43 UTC 
Subject: Re: [SAdev]  New: Updated better new rule - ACT NOW

On Mon, Jun 24, 2002 at 10:27:14AM -0700, bugzilla-daemon@hughes-family.org wrote:
> body ACT_NOW			/A(?i:ct) N(?i:ow)|D[Oo].{0.5} H(?i:esitate)|S(?i:tart now)|NOW/
> describe ACT_NOW		Act Now! Don't Hesitate!

Does anyone know the stability of these regex extensions? man perlre
suggests that some are stable, some aren't.
Comment 2 Matt Sergeant 2002-06-25 01:56:13 UTC 
Subject: Re: [SAdev]  Updated better new rule - ACT NOW

They are stable (perl 5.8 includes them, so consider them stuck).
Comment 3 Michael Moncur 2002-07-10 23:13:24 UTC 
I tested this one against the old one. It's much better at catching spam but 
there are more false positives than I'd like to see. I wonder if one of the 
phrases (NOW would be my guess) isn't as good as the others.

   OVERALL        SPAM     NONSPAM  NAME
      3756        1710        2046  (all messages)
       249         232          17  ACT_NOW
        91          86           5  OLD_ACT_NOW
Comment 4 Justin Mason 2002-07-29 07:51:21 UTC 
- IMO, there should be multiple rules, as
there's at least 3 phrases being tested for there and I bet they
have different hit rates.

- also "NOW" should not be matched; 3 letters without even \b's
is a bad test, *even* if it's all caps!  That's probably the main
cause of FPs.
Comment 5 Duncan Findlay 2002-12-13 15:23:14 UTC 
Added several variations to CVS for testing. Fixed.