http://bugzilla.spamassassin.org/show_bug.cgi?id=3169





------- Additional Comments From [EMAIL PROTECTED]  2004-05-10 21:29 -------
ok, here's the latest stats:

net-daf     12.051  15.5436   0.0000    1.000   0.92    1.00  SPF_HELO_FAIL
net-daf      1.054   1.3589   0.0000    1.000   0.60    0.50  SPF_SOFTFAIL
net-daf      1.054   1.3589   0.0000    1.000   0.60    1.00  SPF_FAIL
net-daf      0.192   0.2471   0.0000    1.000   0.46    0.50  SPF_HELO_SOFTFAIL
net-daf      0.209   0.2695   0.0000    1.000   0.21   -0.00  SPF_PASS
net-daf      0.244   0.3145   0.0000    1.000   0.18   -0.00  SPF_HELO_PASS

bizarre...  all spam?

net-jm       2.921   5.8441   0.0000    1.000   0.83    1.00  SPF_HELO_FAIL
net-jm       2.026   4.0546   0.0000    1.000   0.78    0.50  SPF_SOFTFAIL
net-jm       1.032   2.0648   0.0000    1.000   0.68    1.00  SPF_FAIL
net-jm       0.169   0.3379   0.0000    1.000   0.53    0.50  SPF_HELO_SOFTFAIL
net-jm       0.688   0.4505   0.9252    0.327   0.44   -0.00  SPF_PASS
net-jm       1.176   1.5893   0.7627    0.676   0.27   -0.00  SPF_HELO_PASS

fails are good, passes suck.

net-parkerm  3.637   6.9942   0.4074    0.945   0.70    0.50  SPF_HELO_SOFTFAIL
net-parkerm  1.181   2.3475   0.0582    0.976   0.67    1.00  SPF_FAIL
net-parkerm  64.393  40.6946  87.1858    0.318   0.50   -0.00  SPF_HELO_PASS
net-parkerm  0.065   0.1331   0.0000    1.000   0.47    1.00  SPF_HELO_FAIL
net-parkerm  0.943   1.2948   0.6052    0.681   0.23   -0.00  SPF_PASS
net-parkerm  5.268   0.7502   9.6136    0.072   0.05    0.50  SPF_SOFTFAIL

perhaps another internal_networks issue?

net-quinlan  4.016   0.9267   7.1095    0.115   0.64   -0.00  SPF_HELO_PASS
net-quinlan  2.542   0.7734   4.3124    0.152   0.60   -0.00  SPF_PASS
net-quinlan  0.230   0.3800   0.0801    0.826   0.48    0.50  SPF_SOFTFAIL
net-quinlan  1.201   1.7268   0.6742    0.719   0.47    1.00  SPF_FAIL
net-quinlan  0.180   0.1333   0.2270    0.370   0.37    0.50  SPF_HELO_SOFTFAIL
net-quinlan  2.792   1.1867   4.3992    0.212   0.26    1.00  SPF_HELO_FAIL

not terrific.

net-theo     1.514   1.5218   0.0000    1.000   0.78    0.50  SPF_SOFTFAIL
net-theo     0.539   0.5416   0.0000    1.000   0.68    1.00  SPF_FAIL
net-theo     0.186   0.1874   0.0000    1.000   0.59    1.00  SPF_HELO_FAIL
net-theo     0.132   0.1329   0.0000    1.000   0.57    0.50  SPF_HELO_SOFTFAIL
net-theo     0.118   0.0451  13.9837    0.003   0.26   -0.00  SPF_PASS
net-theo     0.621   0.5552  13.1707    0.040   0.00   -0.00  SPF_HELO_PASS

decent overall.  the FPs for SPF_PASS are valid here, btw.  same spammer 
(judging by the same IP range) with a bunch of domains with valid SPF records.  
SPF_HELO_PASS seem to be from ISPs with SPF records, so that should be valid as 
well.


since SPF isn't a spam indicator, just a forgery indicator, as long as the hits 
are valid, I'm ok with the results?  can people double check so we can either 
fix things or close the ticket?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to