On Thu, Oct 26, 2006 at 04:56:21PM +0200, Leon Kolchinsky wrote: > There is a legitimate e-mail with empty body message but with .doc attachment > (filename is in hebrew) that marked as a spam - > > X-Spam-Status: Yes, hits=5.4 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_44, > FROM_ENDS_IN_NUMS, HTML_MESSAGE, RAZOR2_CF_RANGE_51_100, RAZOR2_CHECK, > ROUND_THE_WORLD > > What would you suggest to eliminate or minimize ‘false positives’ in these > cases?
Well, I think the main hits are Razor and Bayes, since the rest are generally out of your control. You can teach Bayes the message is ham, so that'll help out the next time. As for Razor, you can revoke the message, which may cause Razor to lower the confidence (cf) on the message part, and possibly make it not hit the rules anymore. > I’ve seen that some howto’s suggest putting scores in local.cf file and some > into user_prefs. > What is the right way to do it? Do you want the scores to be site-wide (local.cf) or for a specific user (user_prefs) ? -- Randomly Selected Tagline: But I forgot all about the Amnesia Conference!!
pgpbDxkwqQxQI.pgp
Description: PGP signature
