Hi,
Rocco Scappatura wrote:
My scores:
Content analysis details: (10.4 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.1 FORGED_RCVD_HELO Received: contains a forged HELO
0.0 DK_POLICY_SIGNSOME Domain Keys: policy says domain
signs some
mails
1.7 SARE_PROLOSTOCK_SYM3 BODY: Last week's hot stock scam
0.0 HTML_MESSAGE BODY: HTML included in message
3.5 BAYES_99 BODY: Bayesian spam probability
is 99 to 100%
[score: 1.0000]
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.0 RCVD_IN_JANET_DUL RBL: Relay in JANET MAPS RBL+ DUL
[60.215.113.19 listed in
rbl-plus.mail-abuse.ja.net]
1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see
<http://www.spamcop.net/bl.shtml?60.215.113.19>]
How I have to do to get the score for the same message on my platform?
Looking at this my Bayes scores it highly, but so does a
rules from the SARE_STOCKS rule set. There are also a number
of network tests which get this.
And so? How do you justify this? What I miss?
1. You need to download and install the SARE_STOCKS ruleset from
http://www.rulesemporium.com/
2. You should enable network tests
Can you so us which tests these emails hit on your system?
--
Anthony Peacock
CHIME, Royal Free & University College Medical School
WWW: http://www.chime.ucl.ac.uk/~rmhiajp/
"If you have an apple and I have an apple and we exchange apples
then you and I will still each have one apple. But if you have an
idea and I have an idea and we exchange these ideas, then each of us
will have two ideas." -- George Bernard Shaw
