[Spambayes] Two amusing spam clues

[Toby Dickenson]

On Tuesday 07 January 2003 3:08 pm, Skip Montanaro wrote:
> Neil> I guess a lot of spam doesn't have a message ID so the Debian
> Neil> mail server adds one.
>
> Yeah, seems rather odd, doesn't it?  It's not like they are hard to
> generated or anything.  For me message-id:@pobox.com and
> message-id:@manatee.mojam.com are killer clues for the same reason.

I am seeing a high proportion of spams coming through our secondary MX, so 
message-id:@charon.geminidataloggers.com is a suprising spam clue for me too.

> Neil> I don't about other people on this list but my spambayes filter
> Neil> is kicking spammer ass.  I very rarely see a FN and even more rarely
> Neil> see a FP.  Props to everyone who helped out with development.
>
> Same here on all accounts.  I have fairly conservative cutoffs (0.25 and
> 0.8), so I get a handful of unsures per day.  I can't remember the last
> time I got a false positive.  

I have only had one Unsure in the last few weeks, and it had some interesting 
characteristics. The first half looked very spammy, but the second half was a 
list of three, four, and five digit numbers. Apparently numbers are a strong 
ham clue for me. Particularly 336, 603, and 320.