Question about registration

[David Relson]

On Wed, 25 Feb 2004 13:53:09 -0600
overlord_q at hotmail.com wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
...[snip]...

> Well you can find the output of the scoring run here:
> http://www.remnetworks.org/~ovrlrdq/output.log
> 
> Unfortunately I didnt have the original e-mail itself so I had to
> forward it back to myself.
> 
> I didn't notice anything overly bad/wrong with it, but then again I
> dont have much experience with that. One thing though are the headers:
> 
> - ------
> "rcvd:from"                      14513  0.002521  0.640256  0.996078 +
> "head:remnetworks.org"           14540  0.002521  0.641563  0.996086 +
> "rcvd:remnetworks.org"           14540  0.002521  0.641563  0.996086 +
> "head:Delivered-To"              14540  0.002517  0.641660  0.996093 +
> "rcvd:CST"                       14540  0.002517  0.641660  0.996093 +
> "rcvd:Postfix"                   14540  0.002517  0.641660  0.996093 +
> "rcvd:with"                      14450  0.002497  0.637786  0.996099 +
> "rcvd:for"                       14444  0.002491  0.637640  0.996108 +
> "head:Content-Type"              11921  0.002041  0.526637  0.996139 +
> "head:ovrlrdq"                   14476  0.002462  0.639917  0.996167 +
> - -----
> 
> AFAIK, that means they're all pretty much scored as spam, with a heavy
> weight? remnetworks.org is the mailserver so that shouldn't be spam,
> Postfix is our MTA so same with that, and ovrlrdq is my account on
> there as well.
> 
> Again, thanks for all your help :)

Those counts of 11,921 and 14,500 indicate that the tokens have been
seen many times.  The score of 0.996 indicates that nearly all of the
11,921 (or 14,500) occurrences of the tokens were in spam.

If you _really_ wanted to get rid of those tokens, it could be done wiht
bogoutil's dump/load capability and a little "egrep -v" action.

Good luck!

David