Re: Mailspike scores

2017-05-02 Thread John Hardin

On Tue, 2 May 2017, RW wrote:


On Tue, 2 May 2017 09:20:49 -0700 (PDT)
John Hardin wrote:


On Tue, 2 May 2017, Bowie Bailey wrote:


On 5/2/2017 11:53 AM, John Hardin wrote:

 On Tue, 2 May 2017, Bowie Bailey wrote:


 I was checking to see what the scores for mailspike were on my
server and I noticed that there are two sets of scores.

 Is this expected?


 50_scores is handcoded default scores, 72_scores is generated from
 masscheck


That's what I thought, but what's the point of having handcoded
scores that are overridden by the generated scores?


Reasonable default values are always a good idea.


It looks like 72_scores only holds scores for rules from 72_active.cf
plus scores for MSPIKE rules and SURBL_BLOCKED (what's that doing
there?).

If 72_scores holds generated scores why are so many of then 1.000?


Limits?


You say that 50_scores is "handcoded default scores", but at the top
of the file there's a big block of scores that are claimed to have been
set by perceptron, which I understand fell-off a long time ago. They
certainly look autogenerated.


Check the revision history in SVN.

   http://svn.apache.org/viewvc/spamassassin/trunk/rules/50_scores.cf


On the face of it it looks a lot of the rules I assumed were autoscored
are using scores generated years ago.


Potentially. I have not done a detailed review.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Maxim IV: Close air support covereth a multitude of sins.
---
 6 days until the 72nd anniversary of VE day


Re: Mailspike scores

2017-05-02 Thread RW
On Tue, 2 May 2017 09:20:49 -0700 (PDT)
John Hardin wrote:

> On Tue, 2 May 2017, Bowie Bailey wrote:
> 
> > On 5/2/2017 11:53 AM, John Hardin wrote:  
> >>  On Tue, 2 May 2017, Bowie Bailey wrote:
> >>   
> >> >  I was checking to see what the scores for mailspike were on my
> >> > server and I noticed that there are two sets of scores.
> >> > 
> >> >  Is this expected?  
> >>
> >>  50_scores is handcoded default scores, 72_scores is generated from
> >>  masscheck  
> >
> > That's what I thought, but what's the point of having handcoded
> > scores that are overridden by the generated scores?  
> 
> Reasonable default values are always a good idea.


It looks like 72_scores only holds scores for rules from 72_active.cf
plus scores for MSPIKE rules and SURBL_BLOCKED (what's that doing
there?).

If 72_scores holds generated scores why are so many of then 1.000?

You say that 50_scores is "handcoded default scores", but at the top
of the file there's a big block of scores that are claimed to have been
set by perceptron, which I understand fell-off a long time ago. They
certainly look autogenerated. 

On the face of it it looks a lot of the rules I assumed were autoscored
are using scores generated years ago.


Re: Mailspike scores

2017-05-02 Thread John Hardin

On Tue, 2 May 2017, Bowie Bailey wrote:


On 5/2/2017 11:53 AM, John Hardin wrote:

 On Tue, 2 May 2017, Bowie Bailey wrote:

>  I was checking to see what the scores for mailspike were on my server 
>  and I noticed that there are two sets of scores.
> 
>  Is this expected?


 50_scores is handcoded default scores, 72_scores is generated from
 masscheck


That's what I thought, but what's the point of having handcoded scores that 
are overridden by the generated scores?


Reasonable default values are always a good idea.

--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  USMC Rules of Gunfighting #4: If your shooting stance is good,
  you're probably not moving fast enough nor using cover correctly.
---
 6 days until the 72nd anniversary of VE day


Re: Mailspike scores

2017-05-02 Thread Bowie Bailey

On 5/2/2017 11:53 AM, John Hardin wrote:

On Tue, 2 May 2017, Bowie Bailey wrote:

I was checking to see what the scores for mailspike were on my server 
and I noticed that there are two sets of scores.


50_scores.cf:  score RCVD_IN_MSPIKE_ZBI 2.7
50_scores.cf:  score RCVD_IN_MSPIKE_L5  2.5
50_scores.cf:  score RCVD_IN_MSPIKE_L4  1.7
50_scores.cf:  score RCVD_IN_MSPIKE_L3  0.9
50_scores.cf:  score RCVD_IN_MSPIKE_H3  -0.01
50_scores.cf:  score RCVD_IN_MSPIKE_H4  -0.01
50_scores.cf:  score RCVD_IN_MSPIKE_H5  -1.0
50_scores.cf:  score RCVD_IN_MSPIKE_BL  0.01
50_scores.cf:  score RCVD_IN_MSPIKE_WL  -0.01
72_scores.cf:score RCVD_IN_MSPIKE_BL 0.001 0.010 
0.001  0.010
72_scores.cf:score RCVD_IN_MSPIKE_H2 0.001 -2.800 
0.001 -2.800
72_scores.cf:score RCVD_IN_MSPIKE_H3 0.001 -0.010 
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_H4 0.001 -0.010 
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_H5 0.001 -1.000 
0.001 -1.000
72_scores.cf:score RCVD_IN_MSPIKE_L2 0.001 0.001 
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L3 0.001 0.001 
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L4 0.001 0.001 
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L5 0.001 0.001 
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_WL 0.001 -0.010 
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_ZBI0.001 0.001 
0.001 -1.001


Is this expected?


50_scores is handcoded default scores, 72_scores is generated from 
masscheck


That's what I thought, but what's the point of having handcoded scores 
that are overridden by the generated scores?


--
Bowie


Re: Mailspike scores

2017-05-02 Thread John Hardin

On Tue, 2 May 2017, Bowie Bailey wrote:

I was checking to see what the scores for mailspike were on my server and I 
noticed that there are two sets of scores.


50_scores.cf:  score RCVD_IN_MSPIKE_ZBI 2.7
50_scores.cf:  score RCVD_IN_MSPIKE_L5  2.5
50_scores.cf:  score RCVD_IN_MSPIKE_L4  1.7
50_scores.cf:  score RCVD_IN_MSPIKE_L3  0.9
50_scores.cf:  score RCVD_IN_MSPIKE_H3  -0.01
50_scores.cf:  score RCVD_IN_MSPIKE_H4  -0.01
50_scores.cf:  score RCVD_IN_MSPIKE_H5  -1.0
50_scores.cf:  score RCVD_IN_MSPIKE_BL  0.01
50_scores.cf:  score RCVD_IN_MSPIKE_WL  -0.01
72_scores.cf:score RCVD_IN_MSPIKE_BL 0.001 0.010 0.001  
0.010
72_scores.cf:score RCVD_IN_MSPIKE_H2 0.001 -2.800 0.001 
-2.800
72_scores.cf:score RCVD_IN_MSPIKE_H3 0.001 -0.010 0.001 
-0.010
72_scores.cf:score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 
-0.010
72_scores.cf:score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 
-1.000
72_scores.cf:score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L3 0.001 0.001 0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L4 0.001 0.001 0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 
-0.010
72_scores.cf:score RCVD_IN_MSPIKE_ZBI0.001 0.001 0.001 
-1.001

Is this expected?


50_scores is handcoded default scores, 72_scores is generated from 
masscheck.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  How do you argue with people to whom math is an opinion? -- Unknown
---
 6 days until the 72nd anniversary of VE day


Mailspike scores

2017-05-02 Thread Bowie Bailey
I was checking to see what the scores for mailspike were on my server 
and I noticed that there are two sets of scores.


50_scores.cf:  score RCVD_IN_MSPIKE_ZBI 2.7
50_scores.cf:  score RCVD_IN_MSPIKE_L5  2.5
50_scores.cf:  score RCVD_IN_MSPIKE_L4  1.7
50_scores.cf:  score RCVD_IN_MSPIKE_L3  0.9
50_scores.cf:  score RCVD_IN_MSPIKE_H3  -0.01
50_scores.cf:  score RCVD_IN_MSPIKE_H4  -0.01
50_scores.cf:  score RCVD_IN_MSPIKE_H5  -1.0
50_scores.cf:  score RCVD_IN_MSPIKE_BL  0.01
50_scores.cf:  score RCVD_IN_MSPIKE_WL  -0.01
72_scores.cf:score RCVD_IN_MSPIKE_BL 0.001 0.010 
0.001 0.010
72_scores.cf:score RCVD_IN_MSPIKE_H2 0.001 -2.800 
0.001 -2.800
72_scores.cf:score RCVD_IN_MSPIKE_H3 0.001 -0.010 
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_H4 0.001 -0.010 
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_H5 0.001 -1.000 
0.001 -1.000
72_scores.cf:score RCVD_IN_MSPIKE_L2 0.001 0.001 
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L3 0.001 0.001 
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L4 0.001 0.001 
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L5 0.001 0.001 
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_WL 0.001 -0.010 
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_ZBI0.001 0.001 
0.001 0.001


Is this expected?

--
Bowie