virus blow-back ugliness

Boris 'pi' Piwinger 3.14 at logic.univie.ac.at
Thu Jan 29 15:54:05 CET 2004


Bill McClain wrote:

> I've noticed something this week caused by anti-virus return messages.
> Some sites return the whole base64-encoded package, not as an
> attachement, but as inline text. Bogofilter sees this and scores many
> long base64 strings because of frequent "/" characters which must serve
> as lexer delimiters.
> 
> I've been registering all my spam to date, but I think I will throw
> these away because they inflate the database to no good purpose. 

This is why I think full training is not such a good idea.
So if you don't want to go all the way to only train on
error, you might use the new idea using thresh_update for -u
and do something similiar if you train afterwards.

pi




More information about the Bogofilter mailing list