RE: How can I learn a mail which how many score it got from each my rules?

2006-12-08 Thread Bowie Bailey
Larry Rosenman wrote:
 Halid Faith wrote:
  I use spamassassin3.1.7
  
  I go through some mails.
  I see a mail in /var/log/spamd.log as below Wed Dec  6 13:33:49 2006
  [4484] info: spamd: result: Y 15 -
 
EXTRA_MPART_TYPE,FRONTPAGE,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,
  MIME_QP_LONG_LINE,MSGID_MULTIPLE_AT,SARE_GIF_ATTACH,SARE_OBFUGIRLS,
  SUBJ_ALL_CAPS,SUBJ_ILLEGAL_CHARS,TW_IY,UNPARSEABLE_RELAY,UPPERCASE_25_50
  
  Yet, I can't understand which my rule, how many score gave that
  mail. How can I learn a mail which how many score it got from each
  my rules? is there a command for it ?
 
 In your user_prefs, add the following:
 report _TESTSSCORES( )_
 
 That shows the tests *AND* the scores:
 
 X-LERCTR-Spam-Report: (-108.6 points, 5.0 required)
   BAYES_00=-2.599 DK_POLICY_SIGNSOME=0.001 SPF_PASS=-0.001
 UPPERCASE_25_50=0 USER_IN_WHITELIST=-100 USER_IN_WHITELIST_TO=-6

I haven't seen that one before.  I might start using that as my default
setting.

What I do on my personal account and one or two others is add the full spam
report.  This should already be in the headers for spam, but I add it for
both so I can see the details for rule hits on ham as well.  Just add the
following line to either local.cf or a user's user_prefs file.

add_header all Report _REPORT_

-- 
Bowie


How can I learn a mail which how many score it got from each my rules?

2006-12-07 Thread Halid Faith
I use spamassassin3.1.7

I go through some mails.
I see a mail in /var/log/spamd.log as below
Wed Dec  6 13:33:49 2006 [4484] info: spamd: result: Y 15 -
EXTRA_MPART_TYPE,FRONTPAGE,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART
,MIME_QP_LONG_LINE,MSGID_MULTIPLE_AT,SARE_GIF_ATTACH,SARE_OBFUGIRLS,SUBJ_ALL
_CAPS,SUBJ_ILLEGAL_CHARS,TW_IY,UNPARSEABLE_RELAY,UPPERCA
SE_25_50
scantime=0.6,size=36790,[EMAIL PROTECTED],uid=1001,required_score=15.0,rhost=
localhost,raddr=127.0.0.1,rport=50832,mi
d=[EMAIL PROTECTED]@domain.com,autolearn=no


Yet, I can't understand which my rule, how many score gave that mail.
How can I learn a mail which how many score it got from each my rules?
is there a command for it ?



Re: How can I learn a mail which how many score it got from each my rules?

2006-12-07 Thread John D. Hardin
On Fri, 8 Dec 2006, Halid Faith wrote:

 I go through some mails.
 I see a mail in /var/log/spamd.log as below
 Wed Dec  6 13:33:49 2006 [4484] info: spamd: result: Y 15 -
 EXTRA_MPART_TYPE,FRONTPAGE,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART
 ,MIME_QP_LONG_LINE,MSGID_MULTIPLE_AT,SARE_GIF_ATTACH,SARE_OBFUGIRLS,SUBJ_ALL
 _CAPS,SUBJ_ILLEGAL_CHARS,TW_IY,UNPARSEABLE_RELAY,UPPERCASE_25_50
 
 Yet, I can't understand which my rule, how many score gave that mail.
 How can I learn a mail which how many score it got from each my rules?
 is there a command for it ?

The per-rule scoring details are probably in a header of the message;
look there, assuming the message hasn't been discarded.

If you look at a spam message and don't see a header with per-rule
scores, then add report_safe 0 to your config file and restart the
daemon.

--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  ...to announce there must be no criticism of the President or to
  stand by the President right or wrong is not only unpatriotic and
  servile, but is morally treasonous to the American public.
  -- Theodore Roosevelt, 1918
---
 8 days until Bill of Rights day



RE: How can I learn a mail which how many score it got from each my rules?

2006-12-07 Thread Larry Rosenman
Halid Faith wrote:
 I use spamassassin3.1.7
 
 I go through some mails.
 I see a mail in /var/log/spamd.log as below Wed Dec  6 13:33:49 2006
 [4484] info: spamd: result: Y 15 -
 EXTRA_MPART_TYPE,FRONTPAGE,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART

,MIME_QP_LONG_LINE,MSGID_MULTIPLE_AT,SARE_GIF_ATTACH,SARE_OBFUGIRLS,SUBJ_ALL
 _CAPS,SUBJ_ILLEGAL_CHARS,TW_IY,UNPARSEABLE_RELAY,UPPERCA  
 SE_25_50

scantime=0.6,size=36790,[EMAIL PROTECTED],uid=1001,required_score=15.0,rhost=
 localhost,raddr=127.0.0.1,rport=50832,mi
 d=[EMAIL PROTECTED]@domain.com,autolearn=no
 
 
 Yet, I can't understand which my rule, how many score gave that mail.
 How can I learn a mail which how many score it got from each my rules?
 is there a command for it ?

In your user_prefs, add the following:
report _TESTSSCORES( )_

That shows the tests *AND* the scores:

X-LERCTR-Spam-Report: (-108.6 points, 5.0 required)
BAYES_00=-2.599 DK_POLICY_SIGNSOME=0.001 SPF_PASS=-0.001
UPPERCASE_25_50=0 USER_IN_WHITELIST=-100 USER_IN_WHITELIST_TO=-6

-- 
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893