On Sat, 2010-04-17 at 17:18 -0400, Kevin A. McGrail wrote:
> Comparing the content analysis to the #'s returned, we have a math
> discrepancy....
>
> X-Spam-Status: Yes, hits=6.5 required=6.5 tests= [...]
> X-Spam-Score: 6.5 (******) [...]
These are non-default. Are they generated and inserted by SA?
> Note the 6.4 below:
>
> Content analysis details: (6.4 points, 6.5 required)
Rounding issues? This one added by SA itself, unlike the above?
IIRC, there is *no* rounding (up) by SA, which caused confusion on the
users list before. So, did something else round up the value for the
other headers above? Hmm, *and* decided about the spam status "yes"...?
> -0.5 RCVD_IN_RPBLGOOD RBL: Good machine, passed greylist, high amounts
> of
> Ham
> [64.18.1.27 listed in good.wookie.rptn.ca]
> 1.1 URIBL_GREY Contains an URL listed in the URIBL greylist
> [URIs: constantcontact.com]
> 1.0 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
> 2.4 ONLINE_PHARMACY BODY: Online Pharmacy
> 1.2 TVD_VISIT_PHARMA BODY: TVD_VISIT_PHARMA
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 2.3 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
> 0.0 T_LOTS_OF_MONEY Huge... sums of money
> -1.0 KAM_RPTR_PASSED Passed Mail Relay Reverse DNS Test
Please get a snapshot copy of all your scores *now*. Before any
sa-update run. So we can compute the accurate value with more than one
digit after the comma.
--
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
