Mailspike scores

2017-05-02 Thread Bowie Bailey
I was checking to see what the scores for mailspike were on my server and I noticed that there are two sets of scores. 50_scores.cf: score RCVD_IN_MSPIKE_ZBI 2.7 50_scores.cf: score RCVD_IN_MSPIKE_L5 2.5 50_scores.cf: score RCVD_IN_MSPIKE_L4 1.7 50_scores.cf: score

Re: [solved] Debugging Scores

2017-01-13 Thread Bill Cole
and their associated values so that I can decide which tags could have their scores adjusted? You can grep for the scores in /var/lib/spamassassin. Note that the name of a rule doesn't say everything: before tinkering with the score you should verify that the rule is doing what you e

Re: [solved] Debugging Scores

2017-01-10 Thread Michael B Allen
gt;>> all tags and their associated values so that I can decide which tags >>>> could have their scores adjusted? >>> >>> >>> You can grep for the scores in /var/lib/spamassassin. Note that the name >>> of a rule doesn't say everything: before

Re: Debugging Scores

2017-01-10 Thread Axb
On 01/10/2017 04:49 PM, Michael B Allen wrote: PS: Is it possible to see what values are associated with all tags for debugging purposes? Meaning can I run a command that dumps a list of all tags and their associated values so that I can decide which tags could have their scores adjusted? You

Debugging Scores

2017-01-10 Thread Michael B Allen
>> PS: Is it possible to see what values are associated with all tags for >> debugging purposes? Meaning can I run a command that dumps a list of >> all tags and their associated values so that I can decide which tags >> could have their scores adjusted? > > You can g

Re: Large volume of 0.0 scores suddenly

2015-09-11 Thread Bill Cole
can actually see the 0.0 scores directly in the logs at /var/log/mail.log on the spamassassin servers. E.g. Sep 11 21:07:19 ip-10-181-62-231 spamd[13929]: spamd: clean message (0.0/5.0) for (unknown):65534 in 0.4 seconds, 8128 bytes. Sep 11 21:07:19 ip-10-181-62-231 spamd[13929]: spamd: result

Re: Large volume of 0.0 scores suddenly

2015-09-11 Thread Peter Kelly
wrote: > > > > I can actually see the 0.0 scores directly in the logs > > > I tested one and it was out, but only by 0.04. I thought it was > probably due to your cron job running a bit too early for this morning's > update. > > > > It must be the bayes is c

Re: Large volume of 0.0 scores suddenly

2015-09-11 Thread RW
On Fri, 11 Sep 2015 22:25:46 +0100 Peter Kelly wrote: > I can actually see the 0.0 scores directly in the logs I tested one and it was out, but only by 0.04. I thought it was probably due to your cron job running a bit too early for this morning's update. > It must be the bayes is

Re: Large volume of 0.0 scores suddenly

2015-09-11 Thread Peter Kelly
Bill, I checked there first, I always assume it is something I am doing wrong first. Yes mailchecker (not that obsolete version) is the http service we use and it in turn uses this Golang lib for spamc - https://github.com/saintienn/go-spamc I can actually see the 0.0 scores directly in the logs

Re: Large volume of 0.0 scores suddenly

2015-09-11 Thread Bill Cole
On 11 Sep 2015, at 6:12, Peter Kelly wrote: Hi, Starting on 3rd Sept, I have seen a huge number of 0.0 scores being returned from spamassassin - see attached screenshot from my logs that show I never once received a 0.0 score before 3rd Sept. The default scores for the rules shown do not

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Axb
On 09/11/2015 03:13 PM, Peter Kelly wrote: Axb, We have a SaaS app hosted in AWS that takes in 500k emails a month. We parse these emails and convert them into tickets for the customer - they see a Helpdesk system like Zendesk. Every incoming email gets run through spamassassin via the daemon.

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Axb
different, chances is that your app is not doing the right thing and like Matus suspects, SA is not getting the right thing. Rules & scores do change via sa-update so depending on lots of stuff the results may vary, possibly quite a lot. As we don't have a sample msg of yours (pastebin)

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Matus UHLAR - fantomas
On 11.09.15 14:13, Peter Kelly wrote: We have a SaaS app hosted in AWS that takes in 500k emails a month. We parse these emails and convert them into tickets for the customer - they see a Helpdesk system like Zendesk. Every incoming email gets run through spamassassin via the daemon. does spama

Re: Large volume of 0.0 scores suddenly

2015-09-11 Thread Benny Pedersen
Reindl Harald skrev den 2015-09-11 15:08: in other words: you don't need to pay for them until you not have your own recursion resolver because URIBL_BLOCKED won't go away in that case its just badly marketing :=)

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Peter Kelly
Axb, We have a SaaS app hosted in AWS that takes in 500k emails a month. We parse these emails and convert them into tickets for the customer - they see a Helpdesk system like Zendesk. Every incoming email gets run through spamassassin via the daemon. Here is a link to the output of --lint -D htt

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Benny Pedersen
Peter Kelly skrev den 2015-09-11 15:01: This has nothing to do with URIBL. It has always been blocked for me. I am in the process of paying for their service. It has always been like that, yet the 0.0 scores only started last week. Been running for months before that. so you already have a

Re: Large volume of 0.0 scores suddenly

2015-09-11 Thread Reindl Harald
Am 11.09.2015 um 15:03 schrieb Peter Kelly: Why Antony? What would that do for me other than save hits against URIBL? I am signing up for their paid service so I will not have the URIBL_BLOCKED issue anymore. It does not explain the 0.0 issue I am having anyway. what is so hard to understand

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Peter Kelly
Why Antony? What would that do for me other than save hits against URIBL? I am signing up for their paid service so I will not have the URIBL_BLOCKED issue anymore. It does not explain the 0.0 issue I am having anyway. On 11 September 2015 at 13:42, Antony Stone < antony.st...@spamassassin.open.so

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Peter Kelly
Hi Benny, This has nothing to do with URIBL. It has always been blocked for me. I am in the process of paying for their service. It has always been like that, yet the 0.0 scores only started last week. Been running for months before that. Peter On 11 September 2015 at 13:38, Benny Pedersen

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Antony Stone
> On 09/11/2015 01:17 PM, Peter Kelly wrote: > > - Are you using a local, non forwarding, DNS resolver/caching server ? > > > > No > > - Are you handling mail for a company, personal email, ISP, one domain, > > many domains, etc? > > > > Handling mail for thousands of different companies - we r

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Benny Pedersen
Peter Kelly skrev den 2015-09-11 12:12: Any help greatly appreciated, google URIBL_BLOCKED https://www.google.dk/search?q=uribl_blcoked http://uribl.com/refused.shtml plenty of other links to see how and why do you miss a local dns resolver ? if yes you use shared problems and things like

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Axb
On 09/11/2015 01:17 PM, Peter Kelly wrote: - How are you using SA? (pls specify: amavis, MIMEDefang, a milter, Mailscanner, procmail, Fuglu, etc, etc) Just spamassassin on its own, calling the daemon from an app an "app"? Pls be more explicit. can you pastebin the output of spamassassin --li

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Axb
nd domains. On 11 September 2015 at 11:22, Axb wrote: On 09/11/2015 12:12 PM, Peter Kelly wrote: Hi, Starting on 3rd Sept, I have seen a huge number of 0.0 scores being returned from spamassassin - see attached screenshot from my logs that show I never once received a 0.0 score before 3rd Se

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Olivier Nicole
Peter Kelly writes: > [1:multipart/alternative Hide] > > > [1/1:text/plain Hide] > > Hi, > > Starting on 3rd Sept, I have seen a huge number of 0.0 scores being > returned from spamassassin - see attached screenshot from my logs that show > I never once receiv

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Axb
On 09/11/2015 12:12 PM, Peter Kelly wrote: Hi, Starting on 3rd Sept, I have seen a huge number of 0.0 scores being returned from spamassassin - see attached screenshot from my logs that show I never once received a 0.0 score before 3rd Sept. I use version 3.4.0 and process about 20k emails a

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Kevin A. McGrail
https://wiki.apache.org/spamassassin/DnsBlocklists under the first faq. Regards, KAM On September 11, 2015 6:12:14 AM AST, Peter Kelly wrote: >Hi, > >Starting on 3rd Sept, I have seen a huge number of 0.0 scores being >returned from spamassassin - see attached screenshot from my logs t

Re: user scores not used by spamassassin

2015-01-05 Thread Kevin A. McGrail
On 1/4/2015 10:40 PM, J.J. Day wrote: Hi Kevin, Thanks for the link. It's a starting point. As far as the two functions are concerned, I was just hoping to short cut the process of finding them. Actually, I am a pretty good programmer in half a dozen languages - it's just that I have never

Re: user scores not used by spamassassin

2015-01-04 Thread Kevin A. McGrail
Hi JJ, This is a question for the mimedefang list but yes, you need a semicolon on the first line. That was just my quick cut and paste. A quick Google finds this as perhaps a good starting point: http://lists.roaringpenguin.com/pipermail/mimedefang/2007-April/032485.html However, you might be

Re: user scores not used by spamassassin

2015-01-03 Thread Kevin A. McGrail
On 1/2/2015 8:33 PM, J.J. Day wrote: Hi, I am using SpamAssassin with MimeDefang as a sendmail milter. I would like each recipient to have an individual user score configuration. None of the recipients have an account on the host so MySQL was installed and the needed lines added to the defaul

user scores not used by spamassassin

2015-01-02 Thread J.J. Day
Hi, I am using SpamAssassin with MimeDefang as a sendmail milter. I would like each recipient to have an individual user score configuration. None of the recipients have an account on the host so MySQL was installed and the needed lines added to the default local.cf file to provide that capabil

Re: SA rule - URIBL_SBL-XBL scores false positive?

2014-12-19 Thread Jose Borges Ferreira
(spammhaus/local.cf) score false positive? > —> > uridnsbl URIBL_SBLXBL sbl-xbl.spamhaus.org. TXT > body URIBL_SBLXBL eval:check_uridnsbl('URIBL_SBLXBL’) > <— > > All of a sudden, it scores 40-50% false positive, latest 2-3 days. All > summin' up to now - user

Re: SA rule - URIBL_SBL-XBL scores false positive?

2014-12-19 Thread RW
On Fri, 19 Dec 2014 14:12:47 +0100 Matus UHLAR - fantomas wrote: > >On 12/19/2014 12:28 PM, Dharma Monie wrote: > >>The rule is shipped with SA by default, > >>regarding if it?s enabled by default - checking against that exact > >>uribl - I?m affraid I can?t provide you with a satisfying answer >

Re: SA rule - URIBL_SBL-XBL scores false positive?

2014-12-19 Thread Matus UHLAR - fantomas
On 12/19/2014 12:28 PM, Dharma Monie wrote: The rule is shipped with SA by default, regarding if it’s enabled by default - checking against that exact uribl - I’m affraid I can’t provide you with a satisfying answer there, as I was not the initial admin configuring “this” file. On 19.12.14 12

Re: SA rule - URIBL_SBL-XBL scores false positive?

2014-12-19 Thread Axb
t; uridnsbl URIBL_SBLXBL sbl-xbl.spamhaus.org<http://sbl-xbl.spamhaus.org><http://sbl-xbl.spamhaus.org>. TXT body URIBL_SBLXBL eval:check_uridnsbl('URIBL_SBLXBL’) <— All of a sudden, it scores 40-50% false positive, latest 2-3 days. All summin' up to now - users missing a whol

Re: SA rule - URIBL_SBL-XBL scores false positive?

2014-12-19 Thread Dharma Monie
BL_SBLXBL sbl-xbl.spamhaus.org<http://sbl-xbl.spamhaus.org><http://sbl-xbl.spamhaus.org>. TXT body URIBL_SBLXBL eval:check_uridnsbl('URIBL_SBLXBL’) <— All of a sudden, it scores 40-50% false positive, latest 2-3 days. All summin' up to now - users missing a whole l

Re: SA rule - URIBL_SBL-XBL scores false positive?

2014-12-19 Thread Axb
On 12/19/2014 11:55 AM, Dharma Monie wrote: Anyone experinced SA rule URIBL (spammhaus/local.cf) score false positive? —> uridnsbl URIBL_SBLXBL sbl-xbl.spamhaus.org<http://sbl-xbl.spamhaus.org>. TXT body URIBL_SBLXBL eval:check_uridnsbl('URIBL_SBLXBL’) <— All of a sud

SA rule - URIBL_SBL-XBL scores false positive?

2014-12-19 Thread Dharma Monie
Anyone experinced SA rule URIBL (spammhaus/local.cf) score false positive? —> uridnsbl URIBL_SBLXBL sbl-xbl.spamhaus.org<http://sbl-xbl.spamhaus.org>. TXT body URIBL_SBLXBL eval:check_uridnsbl('URIBL_SBLXBL’) <— All of a sudden, it scores 40-50% false positive, lat

Re: Spamassassin Rule Scores

2014-04-28 Thread Matus UHLAR - fantomas
>On 4/24/2014 6:12 AM, emailitis.com wrote: >>Also, in the maillog, I would like to see spamd show not just the >>tests, but the scores of each. On Sunday 27 April 2014 at 19:03, Matus UHLAR - fantomas wrote: add_header all Report _REPORT_ On 27.04.14 19:10, Antony Stone

Re: Spamassassin Rule Scores

2014-04-27 Thread Antony Stone
On Sunday 27 April 2014 at 19:03, Matus UHLAR - fantomas wrote: > >On 4/24/2014 6:12 AM, emailitis.com wrote: > >>Also, in the maillog, I would like to see spamd show not just the > >>tests, but the scores of each. > > I believe that > > add_header all Rep

Re: Spamassassin Rule Scores

2014-04-27 Thread Matus UHLAR - fantomas
On 4/24/2014 6:12 AM, emailitis.com wrote: Also, in the mailllog, I would like to see spamd show not just the tests, but the scores of each. At present we get just: spamd[7403]: spamd: result: Y 4 - DKIM_SIGNED,HTML_MESSAGE,MIME_HTML_ONLY,T_DKIM_INVALID,T_REMOTE_IMAGE scantime=2.8,size

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 2:14 PM, Axb wrote: IMO this should be configurable as it could break stats/loggers/etc The change right now just adds additional API functions. Nothing uses them. spamd could be configured to use them and should be a configuration option, I agree.

Re: Spamassassin Rule Scores

2014-04-24 Thread Axb
sted but passed tests. Sure... I'm not picky about how it's implemented. ;) Just so long as there's an official API to get the test names and scores, I'm happy. It's in trunk if you want to test it and give feedback, that would be helpful. From a quick basic print of o

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
picky about how it's implemented. ;) Just so long as there's an official API to get the test names and scores, I'm happy. It's in trunk if you want to test it and give feedback, that would be helpful. From a quick basic print of output, looks sane. svn commit -m '

Re: Spamassassin Rule Scores

2014-04-24 Thread David F. Skoll
ed. ;) Just so long as there's an official API to get the test names and scores, I'm happy. Regards, David.

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 11:04 AM, David F. Skoll wrote: We integrate with SpamAssassin at the Perl library level, and we reach into the innards to get at the test scores. Here's our code: my $conf = $sa_status->{conf} || {}; my $scores = $conf->{scores} || {}; my $testn

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 11:37 AM, Benny Pedersen wrote: Kevin A. McGrail skrev den 2014-04-24 17:30: Ahhh... Well not sure it warrants going on the list. I like the idea but need someone to step forward and implement it and I don't think enough will care. replyed private lots of idears, no coders :(

Re: Spamassassin Rule Scores

2014-04-24 Thread Benny Pedersen
Kevin A. McGrail skrev den 2014-04-24 17:30: Ahhh... Well not sure it warrants going on the list. I like the idea but need someone to step forward and implement it and I don't think enough will care. replyed private lots of idears, no coders :(

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 11:28 AM, Benny Pedersen wrote: Kevin A. McGrail skrev den 2014-04-24 17:12: Sounds like overkill without enough demand, personally... only thing i see here is that you writed to me personally Ahhh... Well not sure it warrants going on the list. I like the idea but need someone

Re: Spamassassin Rule Scores

2014-04-24 Thread Benny Pedersen
Kevin A. McGrail skrev den 2014-04-24 17:12: Sounds like overkill without enough demand, personally... only thing i see here is that you writed to me personally

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 11:06 AM, Benny Pedersen wrote: Kevin A. McGrail skrev den 2014-04-24 16:50: Always love people submitting patches! or opensource with think like: make syslog plugin, make it basicly same options as in add_header just for sysloging then each admin can make there own login form

Re: Spamassassin Rule Scores

2014-04-24 Thread Benny Pedersen
Kevin A. McGrail skrev den 2014-04-24 16:50: Always love people submitting patches! or opensource with think like: make syslog plugin, make it basicly same options as in add_header just for sysloging then each admin can make there own login format based on same tags as in add_header i wo

Re: Spamassassin Rule Scores

2014-04-24 Thread David F. Skoll
l, and we reach into the innards to get at the test scores. Here's our code: my $conf = $sa_status->{conf} || {}; my $scores = $conf->{scores} || {}; my $testnames = join(',', (map { (exists($scores->{$_}) && defined($scores->{$_})) ? $_ . &

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 6:12 AM, emailitis.com wrote: Can someone tell me how we can find out the Spamassassin rule scores? Best way is to view the applicable 50_scores.cf directly, i.e. /var/lib/spamassassin/3.004000/updates_spamassassin_org/50_scores.cf for 3.4.0 in the default location. Also, in

Re: Spamassassin Rule Scores

2014-04-24 Thread Axb
et mad which is reassuring! Can anyone help with how to get scores showing in the maillog as well? according to spamd.raw my $yorn = $status->is_spam() ? 'Y' : '.'; my $score = $status->get_score(); my $tests = join(",", sort(grep(length,$status->get

RE: Spamassassin Rule Scores

2014-04-24 Thread Benny Pedersen
emailitis.com skrev den 2014-04-24 14:00: Can anyone help with how to get scores showing in the maillog as well? this needs a patch to spamassassin to support syslog but spampd does what you want note not spamc/spamd

RE: Spamassassin Rule Scores

2014-04-24 Thread emailitis.com
Thank you very much Antony, I had been looking at http://spamassassin.apache.org/tests.html before which is where the "Tests" menu goes to from the page you gave me of https://spamassassin.apache.org/tests_3_3_x.html. I'm not yet mad which is reassuring! Can anyone help with ho

Re: Spamassassin Rule Scores

2014-04-24 Thread Antony Stone
On Thursday 24 April 2014 at 11:12, emailitis.com wrote: > Can someone tell me how we can find out the Spamassassin rule scores? https://spamassassin.apache.org/tests_3_3_x.html Antony -- I want to build a machine that will be proud of me. - Danny Hillis, creator of The Connection Mach

Spamassassin Rule Scores

2014-04-24 Thread emailitis.com
Can someone tell me how we can find out the Spamassassin rule scores? Also, in the mailllog, I would like to see spamd show not just the tests, but the scores of each. At present we get just: spamd[7403]: spamd: result: Y 4 - DKIM_SIGNED,HTML_MESSAGE,MIME_HTML_ONLY,T_DKIM_INVALID,T_REMOTE_IMAGE

SpamAssassin content analysis report with NOT rounded scores?

2014-04-17 Thread Fabio Sangiovanni
Hi list, I'm trying to get a content analysis report with *not* rounded (that is, 3-digit precision) scores, is this even possibile? I'm aware this is documented (http://wiki.apache.org/spamassassin/RoundingIssues) but I was wondering if there's one way around it. I'm using

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-07-15 Thread Kevin A. McGrail
On 7/15/2013 12:08 PM, Scott Witte wrote: Kevin A. McGrail wrote A rule that solely checks for a domain ending in a digit cannot have a 3.5 score. It's far too high. I'm adding a score of 1.0 to the rulesrc which should add a ceiling of 1.0 to this for masschecks. Kevin, I fear this didn't re

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-07-15 Thread Scott Witte
mail-tester.com who confirmed that they do a sa-update nightly. What am I to do Scott -- View this message in context: http://spamassassin.1065346.n5.nabble.com/Rule-TVD-FROM-1-causing-all-our-emails-spam-scores-go-up-tp104732p105825.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-24 Thread Kevin A. McGrail
Excellent! On 5/23/2013 4:55 AM, henrydraper wrote: Thanks, Kevin, I checked and now this rule is only causing 1.0 spam score.

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-23 Thread henrydraper
Thanks, Kevin, I checked and now this rule is only causing 1.0 spam score. -- View this message in context: http://spamassassin.1065346.n5.nabble.com/Rule-TVD-FROM-1-causing-all-our-emails-spam-scores-go-up-tp104732p104800.html Sent from the SpamAssassin - Users mailing list archive at

答复: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-23 Thread henrydraper
our emails' spam scores go up Yep. Regards, KAM henrydraper <[hidden email]> wrote: Thanks Kevin. I'll check in a few days. All I have to do is a sa-update, right? -- View this message in context: http://spamassassin.1065346.n5.nabble.com/Rule-TVD-FROM-1-causing-all-ou

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-20 Thread Kevin A. McGrail
Yep. Regards, KAM henrydraper wrote: >Thanks Kevin. >I'll check in a few days. All I have to do is a sa-update, right? > > > >-- >View this message in context: >http://spamassassin.1065346.n5.nabble.com/Rule-TVD-FROM-1-causing-all-our-emails-spam-scores-go-up-tp

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-19 Thread Andrzej A. Filip
On 05/17/2013 06:08 PM, David F. Skoll wrote: > On Fri, 17 May 2013 17:58:48 +0200 > Axb wrote: > > [Re domain name ends with digits] > >> my LOUD +1 to remove/disable this rule for good. >> anybody else? > > Yes, +1. Rules like this and the 12-char-domain rule > are much too dangerous. IMHO

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-19 Thread henrydraper
Thanks Kevin. I'll check in a few days. All I have to do is a sa-update, right? -- View this message in context: http://spamassassin.1065346.n5.nabble.com/Rule-TVD-FROM-1-causing-all-our-emails-spam-scores-go-up-tp104732p104765.html Sent from the SpamAssassin - Users mailing list archi

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-19 Thread henrydraper
assin.1065346.n5.nabble.com/Rule-TVD-FROM-1-causing-all-our-emails-spam-scores-go-up-tp104732p104764.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Axb
On 05/17/2013 07:23 PM, John Hardin wrote: On Fri, 17 May 2013, Axb wrote: On 05/17/2013 05:22 PM, Kevin A. McGrail wrote: On 5/17/2013 10:59 AM, Axb wrote: > On 05/17/2013 04:49 PM, Kevin A. McGrail wrote: > > I think the issue is more than a local scoring issue. > > > > A rule that solel

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread John Hardin
On Fri, 17 May 2013, Axb wrote: On 05/17/2013 05:22 PM, Kevin A. McGrail wrote: On 5/17/2013 10:59 AM, Axb wrote: > On 05/17/2013 04:49 PM, Kevin A. McGrail wrote: > > I think the issue is more than a local scoring issue. > > > > A rule that solely checks for a domain ending in a digit can

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Kevin A. McGrail
On 5/17/2013 12:08 PM, David F. Skoll wrote: On Fri, 17 May 2013 17:58:48 +0200 Axb wrote: [Re domain name ends with digits] my LOUD +1 to remove/disable this rule for good. anybody else? Yes, +1. Rules like this and the 12-char-domain rule are much too dangerous. Perhaps change to a __ r

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread David F. Skoll
On Fri, 17 May 2013 17:58:48 +0200 Axb wrote: [Re domain name ends with digits] > my LOUD +1 to remove/disable this rule for good. > anybody else? Yes, +1. Rules like this and the 12-char-domain rule are much too dangerous. Regards, David.

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Axb
On 05/17/2013 05:22 PM, Kevin A. McGrail wrote: On 5/17/2013 10:59 AM, Axb wrote: On 05/17/2013 04:49 PM, Kevin A. McGrail wrote: I think the issue is more than a local scoring issue. A rule that solely checks for a domain ending in a digit cannot have a 3.5 score. It's far too high. Imo, th

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Kevin A. McGrail
On 5/17/2013 10:59 AM, Axb wrote: On 05/17/2013 04:49 PM, Kevin A. McGrail wrote: I think the issue is more than a local scoring issue. A rule that solely checks for a domain ending in a digit cannot have a 3.5 score. It's far too high. Imo, this rule should be removed completely. many TVD_*

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Kevin A. McGrail
On 5/17/2013 10:57 AM, Bowie Bailey wrote: Add this line to your local.cf and restart spamd: score TVD_FROM_1 0 I think the issue is more than a local scoring issue. A rule that solely checks for a domain ending in a digit cannot have a 3.5 score. It's far too high. That may be true, but s

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Axb
On 05/17/2013 04:49 PM, Kevin A. McGrail wrote: I think the issue is more than a local scoring issue. A rule that solely checks for a domain ending in a digit cannot have a 3.5 score. It's far too high. Imo, this rule should be removed completely. many TVD_* rules are from 2006 or older... wa

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Bowie Bailey
On 5/17/2013 10:49 AM, Kevin A. McGrail wrote: On 5/17/2013 9:47 AM, Bowie Bailey wrote: On 5/17/2013 2:17 AM, Henry Draper wrote: Hi SpamAssassin PMC, My name is Henry Draper. I’m from Comm100 Network Corporation. We use SpamAssassin to detect our emails' spam scores. lhow you'r

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Kevin A. McGrail
On 5/17/2013 9:47 AM, Bowie Bailey wrote: On 5/17/2013 2:17 AM, Henry Draper wrote: Hi SpamAssassin PMC, My name is Henry Draper. I’m from Comm100 Network Corporation. We use SpamAssassin to detect our emails' spam scores. lhow you're invoking SpamAssassin – *with default conf

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Benny Pedersen
Henry Draper skrev den 2013-05-17 08:17: Looking forward to your reply. Yes, score=7.4 required=5.0 tests=BAYES_00,HTML_DOCTYPE_MISSING, HTML_LINE_HEIGHT,HTML_MESSAGE,HTML_TAGS_O_P,HTML_TITLE_MISSING,RELAY_CA, RELAY_NL,RELAY_STAR,RELAY_US,SAGREY,SPF_PASS,TVD_FROM_1 autolearn=no version=3.3.

Re: Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-17 Thread Bowie Bailey
On 5/17/2013 2:17 AM, Henry Draper wrote: Hi SpamAssassin PMC, My name is Henry Draper. I’m from Comm100 Network Corporation. We use SpamAssassin to detect our emails' spam scores. lhow you're invoking SpamAssassin – *with default configurations* lwhat version of SpamAssassin yo

Rule 'TVD_FROM_1' causing all our emails' spam scores go up

2013-05-16 Thread Henry Draper
Hi SpamAssassin PMC, My name is Henry Draper. I'm from Comm100 Network Corporation. We use SpamAssassin to detect our emails' spam scores. l how you're invoking SpamAssassin - with default configurations l what version of SpamAssassin you're using - Version 3.3

Re: Bayes scores

2013-05-08 Thread Bowie Bailey
On 5/8/2013 12:06 PM, Niamh Holding wrote: Hello Bowie, Wednesday, May 8, 2013, 4:35:35 PM, you wrote: BB> makes a bit more sense. Not a lot, though to have BAYES_20 and BAYES_$) scoring the same. A 20-40% confidence level is not high enough to have a significant positive score nor is it lo

Re: Bayes scores

2013-05-08 Thread Niamh Holding
Hello Bowie, Wednesday, May 8, 2013, 4:35:35 PM, you wrote: BB> makes a bit more sense. Not a lot, though to have BAYES_20 and BAYES_$) scoring the same. -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpqBdg1MLCZD.pgp Description: PGP signature

Re: Bayes scores

2013-05-08 Thread Bowie Bailey
final score. In this case, Bayes thinks the message is ham, but is not confident enough to merit a negative score. Take a look at the full list of Bayes scores and it makes a bit more sense. score BAYES_00 0 0 -1.5 -1.9 score BAYES_05 0 0 -0.3 -0.5 score BAYES_20 0 0 -0.001 -0.001

Bayes scores

2013-05-08 Thread Niamh Holding
Hello Same score for BAYES_20 and BAYES_40 seems a bit strange 50_scores.cf:score BAYES_20 0 0 -0.001 -0.001 50_scores.cf:score BAYES_40 0 0 -0.001 -0.001 -- Best regards, Niamh mailto:ni...@fullbore.co.uk pgpY3KK2wQ_uW.pgp Description: PGP signature

Reporting matched Rules and Scores (was: Re: sa-exim Terse Rules)

2013-04-19 Thread Karsten Bräckelmann
he default and customize it using the more verbose (yet really terse) variant with scores, by adding an add_header option to your site config, similar to the one in 10_default_prefs.cf. > It seems this has changed somewhat from version to version so I can’t > seem to find anything specificall

Re: Storing Individual Scores

2012-12-18 Thread Joseph Acquisto
>>> On 12/18/2012 at 12:26 AM, Sean Tout wrote: > Hello, > > I installed SA 3.3.3 on Debian. I'm looking to view and/or log (to file or > db) individual tests scores in addition to the overall score. Could you let > me know how I can configure SA to show o

Storing Individual Scores

2012-12-17 Thread Sean Tout
Hello, I installed SA 3.3.3 on Debian. I'm looking to view and/or log (to file or db) individual tests scores in addition to the overall score. Could you let me know how I can configure SA to show or log individual tests scores? Your Help would be much appreciated. Regards, -Sean. --

Re: Suddenly a lot of low scores

2012-12-13 Thread Bowie Bailey
Please keep this on the list. On 12/12/2012 8:09 PM, Joseph Acquisto wrote: It doesn't matter how many messages SA has processed. What matters is how many messages Bayes has learned via autolearn or manual sa-learn runs. You can log in as the user SA runs as and check the bayes database: $ sa

Re: Suddenly a lot of low scores

2012-12-12 Thread Joseph Acquisto
>>> On 12/12/2012 at 11:39 AM, Joseph Acquisto wrote: >> >> >>Without seeing the messages, there's not much we can say about the >>scores. Put the full messages in pastebin and give us the link so we >>can look at it. >> >>The autolearn

Re: Suddenly a lot of low scores

2012-12-12 Thread Joseph Acquisto
>I send 5-10 messages daily. Spam only, tho, little ham seems to get by, mostly >missed spam. > >joe a. I meant, that number of forwarded messages for bayes to learn. Should be well over 200 spam by now. Will it accept unmarked mail as ham, if sent as such, or would that mess things up? joe

Re: Suddenly a lot of low scores

2012-12-12 Thread Bowie Bailey
On 12/12/2012 11:39 AM, Joseph Acquisto wrote: Without seeing the messages, there's not much we can say about the scores. Put the full messages in pastebin and give us the link so we can look at it. The autolearn looks normal to me. autolearn=unavailable -- This means that somethin

Re: Suddenly a lot of low scores

2012-12-12 Thread Joseph Acquisto
> > >Without seeing the messages, there's not much we can say about the >scores. Put the full messages in pastebin and give us the link so we >can look at it. > >The autolearn looks normal to me. > >autolearn=unavailable -- This means that something was lockin

Re: Suddenly a lot of low scores

2012-12-12 Thread Bowie Bailey
T_REMOTE_IMAGE Message contains an external image * 0.1 FROM_12LTRDOM From a 12-letter domain The autolearn seems odd. Without seeing the messages, there's not much we can say about the scores. Put the full messages in pastebin and give us the link so we can look at it. The auto

Suddenly a lot of low scores

2012-12-11 Thread Joseph Acquisto
Suddenly a lot of garbage is getting thru. Stuff with nonsense text, etc. This is what I see: X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on open-122 X-Spam-Level: X-Spam-Status: No, score=0.1 required=5.0 tests=DECEASED_NO_ML,HTML_MESSAGE autolearn=unavailable version=3.3.

Re: SpamAssassin scores and 12-letter domains

2012-08-07 Thread Kevin A. McGrail
On 8/7/2012 9:53 AM, Kevin A. McGrail wrote: It's a good point and I sent a recommendation to ASF infrastructure. FYI, Infra gave a good response which basically boils down to small changes in the threshold equals LOTS of issues for them. They likely get a LOT of spam. We need to focus on f

Re: SpamAssassin scores and 12-letter domains

2012-08-07 Thread Kevin A. McGrail
. All spamassassin does (on its own) is classify. Certain implementations, in this case, the ASF's, will block emails that have been classified to a certain confidence level. The default scores are not manually set, but (in my understanding) are evaluat

Re: SpamAssassin scores and 12-letter domains

2012-08-07 Thread Giles Coochey
pedantic... Spamassassin does not blacklist, spamassassin does not block. All spamassassin does (on its own) is classify. Certain implementations, in this case, the ASF's, will block emails that have been classified to a certain confidence level. The default scores are not manually set

Re: SpamAssassin scores and 12-letter domains

2012-08-06 Thread Ben Johnson
e modified? > > bare in mind: SpamAssassin is a framework and VERY flexible. > It's aiming to be the global solution for spam filtering. > > The SpamAssassin project delivers a set of rules and scores. > > These may not fit all types fo traffic, globally - with minimal sk

Re: SpamAssassin scores and 12-letter domains

2012-08-06 Thread Axb
. It's aiming to be the global solution for spam filtering. The SpamAssassin project delivers a set of rules and scores. These may not fit all types fo traffic, globally - with minimal skills you can modify the ruleset to work for your setup.

<    1   2   3   4   5   6   7   8   9   10   >