>>> a bit over 2% of my spam includes a (relatively well-formed) .biz URL, >>> and well over 6% of it includes an .info URL. >>> >>> I understand that the reason SpamAssassin *does* flag up those e-mails >>> with a .biz or .info TLD is simply that across their set of spam and >>> non-spam, it does turn into a useful indicator. > > To me, merely 2% of spam having it doesn't justify using it as a > prominent detector of spam. Nearly all of my spam came from .com > domains, we should flag all .com mail as being spam... > > It really is a stupid way of managing spam. They're both legit domains, > and the .info one is far more correct than the widespread misuse of .com > for non-commercial reasons. > It depends on what percentage of the mail from .biz is not spam. If messages for .biz make up 2% of his spam, but 100% of the messages from .biz are spam, then it is justified. The question is if the default is justified for most people. I know it is for me. Mikkel -- Do not meddle in the affairs of dragons, for thou art crunchy and taste good with Ketchup!