Re: No imageinfo.pm score

2011-06-01 Thread Yet Another Ninja

On 2011-06-01 12:42, Barry Kwok wrote:

I just found out that there is no ImageInfo plugin score in one of my
server. Spamassassin debug show:

Jun  1 17:46:50.229 [29338] dbg: config: fixed relative path:
/var/lib/spamassas
sin/3.003001/updates_spamassassin_org/20_imageinfo.cf
Jun  1 17:46:50.229 [29338] dbg: config: using
/var/lib/spamassassin/3.003001/u
pdates_spamassassin_org/20_imageinfo.cf for included file
Jun  1 17:46:50.229 [29338] dbg: config: read file
/var/lib/spamassassin/3.00300
1/updates_spamassassin_org/20_imageinfo.cf
..
...
..
..
Jun  1 17:47:08.197 [29338] dbg: imageinfo: image
ratio=0.000254277605525206, mi
n=0.000 max=0.008
Jun  1 17:47:08.197 [29338] dbg: rules: ran eval rule __DC_IMG_TEXT_RATIO
==

got hit (1)



But there is no DC_IMG_TEXT_RATIO score.

I test the same spam in other server and have DC_IMG_TEXT_RATIO score.
I compare the debug log and can't see the difference.


__DC_IMG_TEXT_RATIO is used by the meta DC_IMAGE_SPAM_TEXT

Per default there is no DC_IMG_TEXT_RATIO rule scoring unless you've set 
a score manually


Pls paste the sample message on pastebin.com and let others compare results


Re: No imageinfo.pm score

2011-06-01 Thread Barry Kwok
On Wed, Jun 1, 2011 at 7:27 PM, Yet Another Ninja axb.li...@gmail.comwrote:

 On 2011-06-01 12:42, Barry Kwok wrote:

 I just found out that there is no ImageInfo plugin score in one of my
 server. Spamassassin debug show:

 Jun  1 17:46:50.229 [29338] dbg: config: fixed relative path:
 /var/lib/spamassas
 sin/3.003001/updates_spamassassin_org/20_imageinfo.cf
 Jun  1 17:46:50.229 [29338] dbg: config: using
 /var/lib/spamassassin/3.003001/u
 pdates_spamassassin_org/20_imageinfo.cf for included file
 Jun  1 17:46:50.229 [29338] dbg: config: read file
 /var/lib/spamassassin/3.00300
 1/updates_spamassassin_org/20_imageinfo.cf
 ..
 ...
 ..
 ..
 Jun  1 17:47:08.197 [29338] dbg: imageinfo: image
 ratio=0.000254277605525206, mi
 n=0.000 max=0.008
 Jun  1 17:47:08.197 [29338] dbg: rules: ran eval rule __DC_IMG_TEXT_RATIO
 ==

 got hit (1)



 But there is no DC_IMG_TEXT_RATIO score.

 I test the same spam in other server and have DC_IMG_TEXT_RATIO score.
 I compare the debug log and can't see the difference.


 __DC_IMG_TEXT_RATIO is used by the meta DC_IMAGE_SPAM_TEXT

 Per default there is no DC_IMG_TEXT_RATIO rule scoring unless you've set a
 score manually

 Pls paste the sample message on pastebin.com and let others compare
 results



I have manually set a score for __DC_IMG_TEXT_RATIO but there still no
score.

here is a sample spam messages:

http://pastebin.com/T2rszLgJ


Re: No imageinfo.pm score

2011-06-01 Thread John Hardin

On Wed, 1 Jun 2011, Barry Kwok wrote:


I have manually set a score for __DC_IMG_TEXT_RATIO but there still no
score.


Subrules (rules whose names begin with two underscores) _cannot_ have a 
score assigned to them, as they do not by themselves contribute to the 
message's score. They are combined with other rules in meta rules which, 
if not also named with two leading underscores, may be assigned a score.


Look to see what meta rules __DC_IMG_TEXT_RATIO appears in. Are those 
rules listed as hits in your log? Are those rules assigned scores that 
make sense?


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Mine eyes have seen the horror of the voting of the horde;
  They've looted the fromagerie where guv'ment cheese is stored;
  If war's not won before the break they grow so quickly bored;
  Their vote counts as much as yours.  -- Tam
---
 5 days until the 67th anniversary of D-Day


Re: No imageinfo.pm score

2011-06-01 Thread Barry Kwok
On Wed, Jun 1, 2011 at 11:31 PM, John Hardin jhar...@impsec.org wrote:

 On Wed, 1 Jun 2011, Barry Kwok wrote:

  I have manually set a score for __DC_IMG_TEXT_RATIO but there still no
 score.


 Subrules (rules whose names begin with two underscores) _cannot_ have a
 score assigned to them, as they do not by themselves contribute to the
 message's score. They are combined with other rules in meta rules which, if
 not also named with two leading underscores, may be assigned a score.

 Look to see what meta rules __DC_IMG_TEXT_RATIO appears in. Are those rules
 listed as hits in your log? Are those rules assigned scores that make sense?

 --
  John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
  jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
 ---
  Mine eyes have seen the horror of the voting of the horde;
  They've looted the fromagerie where guv'ment cheese is stored;
  If war's not won before the break they grow so quickly bored;
  Their vote counts as much as yours.  -- Tam
 ---
  5 days until the 67th anniversary of D-Day


Thanks. I manually create a meta rule set a score. Spamassassin now hits.


--barry