I noticed a message I posted to a mailing list this morning got tagged by 
Razor for some reason.  I ran razor-check -d to see what engine it tripped 
on, then revoked it, then checked again to see if that was sufficient.

To my surprise, the confidence level actually *increased* between the first 
check and the second!

Here are the relevant lines from the razor-check output.

Before razor-revoke:
Jul 08 09:59:46.305555 check[16415]: [ 6] mail 1.0 e=8 sig=2eSmDHh_A-4A: Is 
spam: cf 80 >= min_cf 6

After razor-revoke:
Jul 08 10:02:49.567053 check[16443]: [ 6] mail 1.0 e=8 sig=2eSmDHh_A-4A: Is 
spam: cf 87 >= min_cf 6

Engine 8 is the new whiplash engine, correct?

Is there a way to determine what piece of a message was used to generate a 
particular hash?  I'm curious as to what actually triggered it - and as to 
why the confidence level would increase after revoking.

(In case you need it, the relevant message is at 
http://lists.roaringpenguin.com/pipermail/mimedefang/2004-July/023299.html )

-- 
Kelson Vibber
SpeedGate Communications, <www.speed.net>


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Razor-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/razor-users

Reply via email to