You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2015/07/13 04:39:25 UTC
svn commit: r1690563 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Mon Jul 13 02:39:24 2015
New Revision: 1690563
URL: http://svn.apache.org/r1690563
Log:
updated scores for revision 1690428 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1690563&r1=1690562&r2=1690563&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Mon Jul 13 02:39:24 2015
@@ -1,10 +1,10 @@
-score ACCT_PHISHING 1.500 1.498 1.500 1.498
-score ACCT_PHISHING_MANY 2.409 2.999 2.409 2.999
+score ACCT_PHISHING 1.498 1.499 1.498 1.499
+score ACCT_PHISHING_MANY 2.999 1.462 2.999 1.462
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
score AC_HTML_NONSENSE_TAGS 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
-score AC_SPAMMY_URI_PATTERNS10 3.999 2.036 3.999 2.036
+score AC_SPAMMY_URI_PATTERNS10 3.995 1.748 3.995 1.748
score AC_SPAMMY_URI_PATTERNS11 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS12 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS2 1.000 1.000 1.000 1.000
@@ -12,102 +12,107 @@ score AC_SPAMMY_URI_PATTERNS3
score AC_SPAMMY_URI_PATTERNS4 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
-score ADMITS_SPAM 2.899 2.796 2.899 2.796
+score ADMITS_SPAM 2.896 2.799 2.896 2.799
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.813 1.805 1.813 1.805
-score ADVANCE_FEE_2_NEW_MONEY 1.999 1.997 1.999 1.997
-score ADVANCE_FEE_3_NEW 1.501 3.496 1.501 3.496
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.001 0.593 0.001 0.593
-score ADVANCE_FEE_3_NEW_MONEY 2.999 3.096 2.999 3.096
-score ADVANCE_FEE_4_NEW 2.499 2.596 2.499 2.596
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.070 1.288 2.070 1.288
-score ADVANCE_FEE_4_NEW_MONEY 3.000 3.096 3.000 3.096
-score ADVANCE_FEE_5_NEW 2.699 2.697 2.699 2.697
-score ADVANCE_FEE_5_NEW_FRM_MNY 4.099 1.066 4.099 1.066
-score ADVANCE_FEE_5_NEW_MONEY 3.115 3.595 3.115 3.595
-score AD_PREFS 0.688 1.641 0.688 1.641
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.407 0.903 1.407 0.903
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.568 1.297 2.568 1.297
-score AXB_XM_FORGED_OL2600 2.301 1.979 2.301 1.979
-score AXB_X_FF_SEZ_S 2.799 2.696 2.799 2.696
-score BODY_URI_ONLY 0.999 0.840 0.999 0.840
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.500 1.028 0.500 1.028
+score ADVANCE_FEE_2_NEW_MONEY 1.998 1.999 1.998 1.999
+score ADVANCE_FEE_3_NEW 3.496 2.516 3.496 2.516
+score ADVANCE_FEE_3_NEW_FORM 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.001 0.587 0.001 0.587
+score ADVANCE_FEE_3_NEW_MONEY 3.696 3.099 3.696 3.099
+score ADVANCE_FEE_4_NEW 2.596 2.499 2.596 2.499
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.694 2.328 0.694 2.328
+score ADVANCE_FEE_4_NEW_MONEY 3.096 3.099 3.096 3.099
+score ADVANCE_FEE_5_NEW 2.796 2.699 2.796 2.699
+score ADVANCE_FEE_5_NEW_FRM_MNY 4.399 1.633 4.399 1.633
+score ADVANCE_FEE_5_NEW_MONEY 3.536 2.946 3.536 2.946
+score AD_PREFS 0.001 1.699 0.001 1.699
+score AXB_XMAILER_MIMEOLE_OL_024C2 4.495 2.921 4.495 2.921
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.060 1.277 2.060 1.277
+score AXB_XM_FORGED_OL2600 2.275 1.953 2.275 1.953
+score AXB_X_FF_SEZ_S 2.498 2.245 2.498 2.245
+score BODY_URI_ONLY 0.999 0.834 0.999 0.834
score CANT_SEE_AD 1.000 1.000 1.000 1.000
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499 1.498 1.499 1.498
-score CK_HELO_GENERIC 0.250 0.248 0.250 0.248
-score COMMENT_GIBBERISH 1.000 1.498 1.000 1.498
+score CK_HELO_DYNAMIC_SPLIT_IP 1.498 1.500 1.498 1.500
+score CK_HELO_GENERIC 0.249 0.250 0.249 0.250
+score COMMENT_GIBBERISH 1.498 1.499 1.498 1.499
score COMPENSATION 1.499 1.499 1.499 1.499
-score DATE_IN_FUTURE_96_Q 2.600 2.298 2.600 2.298
-score DEAR_BENEFICIARY 3.499 3.396 3.499 3.396
-score DSN_NO_MIMEVERSION 1.999 1.997 1.999 1.997
-score FBI_MONEY 1.999 1.999 1.999 1.999
-score FBI_SPOOF 1.999 1.997 1.999 1.997
-score FILL_THIS_FORM 3.499 1.651 3.499 1.651
-score FORM_FRAUD 0.001 0.998 0.001 0.998
-score FORM_FRAUD_3 1.776 2.669 1.776 2.669
-score FORM_FRAUD_5 1.235 2.284 1.235 2.284
+score DATE_IN_FUTURE_96_Q 2.297 2.299 2.297 2.299
+score DEAR_BENEFICIARY 3.396 3.399 3.396 3.399
+score DSN_NO_MIMEVERSION 1.997 1.999 1.997 1.999
+score FBI_MONEY 1.058 1.497 1.058 1.497
+score FBI_SPOOF 1.997 1.999 1.997 1.999
+score FILL_THIS_FORM 3.496 1.662 3.496 1.662
+score FORM_FRAUD 0.999 0.998 0.999 0.998
+score FORM_FRAUD_3 2.696 1.909 2.696 1.909
+score FORM_FRAUD_5 1.583 1.915 1.583 1.915
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score FOUND_YOU 2.090 1.015 2.090 1.015
-score FREEMAIL_FORGED_FROMDOMAIN 0.001 0.248 0.001 0.248
+score FOUND_YOU 2.098 1.017 2.098 1.017
+score FREEMAIL_FORGED_FROMDOMAIN 0.002 0.249 0.002 0.249
score FROM_MISSPACED 0.001 0.001 0.001 0.001
-score FROM_MISSP_EH_MATCH 2.000 1.997 2.000 1.997
-score FROM_MISSP_FREEMAIL 0.001 0.780 0.001 0.780
-score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
-score FROM_MISSP_PHISH 1.398 3.233 1.398 3.233
-score FROM_MISSP_REPLYTO 1.306 0.001 1.306 0.001
+score FROM_MISSP_EH_MATCH 0.001 1.999 0.001 1.999
+score FROM_MISSP_FREEMAIL 2.602 3.861 2.602 3.861
+score FROM_MISSP_MSFT 0.001 0.773 0.001 0.773
+score FROM_MISSP_PHISH 4.428 3.568 4.428 3.568
+score FROM_MISSP_REPLYTO 2.797 2.788 2.797 2.788
score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000
-score FROM_MISSP_TO_UNDISC 0.001 0.001 0.001 0.001
-score FROM_MISSP_USER 0.001 0.001 0.001 0.001
-score FROM_MISSP_XPRIO 0.001 0.001 0.001 0.001
-score FROM_WEBSITE 3.199 0.293 3.199 0.293
-score FSL_BOTSPAM_1 1.658 2.272 1.658 2.272
-score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
-score FSL_HELO_BARE_IP_2 1.999 1.676 1.999 1.676
-score FSL_HELO_FIREWALL 2.899 2.596 2.899 2.596
-score FSL_MY_NAME_IS 3.499 2.896 3.499 2.896
-score FSL_NEW_HELO_USER 1.999 0.840 1.999 0.840
-score FUZZY_DR_OZ 0.001 2.297 0.001 2.297
+score FROM_MISSP_TO_UNDISC 0.001 3.599 0.001 3.599
+score FROM_MISSP_USER 0.001 0.659 0.001 0.659
+score FROM_MISSP_XPRIO 0.001 2.499 0.001 2.499
+score FROM_WEBSITE 3.096 2.959 3.096 2.959
+score FSL_BOTSPAM_1 1.476 2.172 1.476 2.172
+score FSL_CTYPE_WIN1251 0.001 0.357 0.001 0.357
+score FSL_HELO_BARE_IP_2 1.998 1.688 1.998 1.688
+score FSL_HELO_FIREWALL 0.001 2.599 0.001 2.599
+score FSL_MY_NAME_IS 2.896 2.900 2.896 2.900
+score FSL_NEW_HELO_USER 1.600 0.852 1.600 0.852
+score FUZZY_DR_OZ 2.298 0.001 2.298 0.001
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
-score GOOG_REDIR_NORDNS 2.699 1.981 2.699 1.981
+score GOOG_REDIR_NORDNS 2.699 0.895 2.699 0.895
+score GOOG_REDIR_SHORT 1.798 0.001 1.798 0.001
+score HDRS_LCASE 0.099 0.001 0.099 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001
-score HEXHASH_WORD 0.508 2.996 0.508 2.996
-score HK_LOTTO 0.602 0.551 0.602 0.551
-score HK_LOTTO_NAME 0.001 0.998 0.001 0.998
-score HK_LOTTO_SUBJECT 0.001 0.999 0.001 0.999
-score HK_NAME_MR_MRS 0.999 0.001 0.999 0.001
-score HK_RANDOM_FROM 1.000 0.998 1.000 0.998
-score HK_RANDOM_REPLYTO 0.999 0.999 0.999 0.999
-score HK_SCAM_N2 2.858 2.234 2.858 2.234
-score HTML_OFF_PAGE 1.999 1.997 1.999 1.997
-score LIST_PARTIAL 1.000 0.998 1.000 0.998
+score HEXHASH_WORD 2.795 2.999 2.795 2.999
+score HK_LOTTO 0.336 0.548 0.336 0.548
+score HK_LOTTO_NAME 0.998 1.000 0.998 1.000
+score HK_LOTTO_SUBJECT 0.998 0.999 0.998 0.999
+score HK_NAME_MR_MRS 0.998 0.001 0.998 0.001
+score HK_RANDOM_FROM 0.998 1.000 0.998 1.000
+score HK_RANDOM_REPLYTO 0.998 0.999 0.998 0.999
+score HK_SCAM_N2 2.151 2.366 2.151 2.366
+score HTML_OFF_PAGE 1.998 1.999 1.998 1.999
+score LIST_PARTIAL 0.998 1.000 0.998 1.000
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
score LIST_PRTL_SAME_USER 1.000 1.000 1.000 1.000
-score LONG_HEX_URI 2.999 1.423 2.999 1.423
+score LONG_HEX_URI 2.996 1.504 2.996 1.504
score LONG_IMG_URI 1.000 1.000 1.000 1.000
-score LOTS_OF_MONEY 0.001 0.010 0.001 0.010
-score LOTTO_AGENT 2.499 2.499 2.499 2.499
-score LOTTO_AGENT_RPLY 0.001 2.855 0.001 2.855
+score LOTS_OF_MONEY 0.010 0.010 0.010 0.010
+score LOTTO_AGENT 2.497 2.499 2.497 2.499
+score LOTTO_AGENT_RPLY 2.035 1.767 2.035 1.767
score LOTTO_DEPT 0.001 0.001 0.001 0.001
score LOTTO_URI 0.001 0.001 0.001 0.001
score LUCRATIVE 1.000 1.000 1.000 1.000
-score MANY_SPAN_IN_TEXT 0.001 2.197 0.001 2.197
-score MILLION_USD 1.015 0.686 1.015 0.686
-score MIME_NO_TEXT 1.999 1.997 1.999 1.997
-score MONEY_ATM_CARD 2.784 2.899 2.784 2.899
+score MANY_SPAN_IN_TEXT 2.197 2.200 2.197 2.200
+score MILLION_USD 1.997 0.689 1.997 0.689
+score MIME_NO_TEXT 1.998 1.999 1.998 1.999
+score MONEY_ATM_CARD 2.772 1.630 2.772 1.630
score MONEY_FORM 0.001 0.001 0.001 0.001
-score MONEY_FRAUD_3 3.399 3.296 3.399 3.296
-score MONEY_FRAUD_5 1.870 3.624 1.870 3.624
-score MONEY_FRAUD_8 2.003 2.241 2.003 2.241
-score MONEY_FROM_41 1.999 1.997 1.999 1.997
-score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
-score MSGID_NOFQDN1 3.699 3.695 3.699 3.695
-score NAME_EMAIL_DIFF 3.599 0.431 3.599 0.431
-score NSL_RCVD_FROM_USER 0.001 0.403 0.001 0.403
-score NSL_RCVD_HELO_USER 0.548 2.558 0.548 2.558
-score OBFU_TEXT_ATTACH 0.001 1.367 0.001 1.367
-score PDS_FROM_2_EMAILS 3.899 0.617 3.899 0.617
-score PHISHING_FREEMAIL 2.843 2.602 2.843 2.602
+score MONEY_FRAUD_3 3.096 3.299 3.096 3.299
+score MONEY_FRAUD_5 1.865 3.733 1.865 3.733
+score MONEY_FRAUD_8 1.593 3.460 1.593 3.460
+score MONEY_FROM_41 1.997 1.999 1.997 1.999
+score MONEY_FROM_MISSP 1.997 0.001 1.997 0.001
+score MSGID_NOFQDN1 3.696 3.699 3.696 3.699
+score NAME_EMAIL_DIFF 3.795 0.584 3.795 0.584
+score NSL_RCVD_FROM_USER 1.944 4.489 1.944 4.489
+score NSL_RCVD_HELO_USER 0.998 2.533 0.998 2.533
+score OBFU_DOC_ATTACH 0.001 2.900 0.001 2.900
+score OBFU_JPG_ATTACH 0.001 2.658 0.001 2.658
+score OBFU_TEXT_ATTACH 2.196 2.167 2.196 2.167
+score PDS_FROM_2_EMAILS 3.996 0.467 3.996 0.467
+score PHISHING_FREEMAIL 3.096 2.578 3.096 2.578
score PP_MIME_FAKE_ASCII_TEXT 0.999 0.001 0.999 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
@@ -120,45 +125,45 @@ score RCVD_IN_MSPIKE_H3
score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 -1.000
score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L3 0.001 1.499 0.001 1.499
-score RCVD_IN_MSPIKE_L4 0.001 2.497 0.001 2.497
-score RCVD_IN_MSPIKE_L5 0.001 3.196 0.001 3.196
+score RCVD_IN_MSPIKE_L3 0.001 1.500 0.001 1.500
+score RCVD_IN_MSPIKE_L4 0.001 2.499 0.001 2.499
+score RCVD_IN_MSPIKE_L5 0.001 3.199 0.001 3.199
score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 -0.010
-score RCVD_IN_MSPIKE_ZBI 0.001 1.523 0.001 1.523
-score RISK_FREE 2.699 2.796 2.699 2.796
-score RP_MATCHES_RCVD -1.535 -1.405 -1.535 -1.405
-score SERGIO_SUBJECT_VIAGRA01 2.100 2.571 2.100 2.571
-score SPOOFED_FREEM_REPTO 1.999 1.998 1.999 1.998
-score SPOOFED_FREEM_REPTO_CHN 2.000 1.998 2.000 1.998
+score RCVD_IN_MSPIKE_ZBI 0.001 1.525 0.001 1.525
+score RISK_FREE 2.897 2.799 2.897 2.799
+score RP_MATCHES_RCVD -1.050 -1.428 -1.050 -1.428
+score SERGIO_SUBJECT_VIAGRA01 2.045 2.864 2.045 2.864
+score SPOOFED_FREEM_REPTO 1.997 1.999 1.997 1.999
+score SPOOFED_FREEM_REPTO_CHN 1.998 1.999 1.998 1.999
score STOCK_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score STYLE_GIBBERISH 3.012 3.496 3.012 3.496
+score STYLE_GIBBERISH 3.235 3.499 3.235 3.499
score SYSADMIN 1.000 1.000 1.000 1.000
-score TAB_IN_FROM 0.500 0.265 0.500 0.265
-score THIS_AD 0.697 1.868 0.697 1.868
-score TO_EQ_FM_DOM_SPF_FAIL 0.001 1.855 0.001 1.855
+score TAB_IN_FROM 0.498 0.466 0.498 0.466
+score THIS_AD 2.086 1.672 2.086 1.672
+score TO_EQ_FM_DOM_SPF_FAIL 0.001 1.807 0.001 1.807
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
-score TO_IN_SUBJ 0.100 0.099 0.100 0.099
-score TO_NO_BRKTS_FROM_MSSP 1.301 0.283 1.301 0.283
-score TO_NO_BRKTS_HTML_IMG 0.516 1.657 0.516 1.657
-score TO_NO_BRKTS_HTML_ONLY 0.001 1.997 0.001 1.997
-score TO_NO_BRKTS_MSFT 2.499 2.497 2.499 2.497
-score TO_NO_BRKTS_NORDNS_HTML 0.001 0.961 0.001 0.961
-score TO_NO_BRKTS_PCNT 1.486 2.484 1.486 2.484
-score TVD_FROM_1 1.000 0.998 1.000 0.998
-score TVD_SPACE_ENCODED 2.499 1.409 2.499 1.409
-score TVD_SPACE_ENC_FM_MIME 1.999 1.997 1.999 1.997
-score TVD_SPACE_RATIO_MINFP 2.749 2.746 2.749 2.746
+score TO_IN_SUBJ 0.099 0.100 0.099 0.100
+score TO_NO_BRKTS_FROM_MSSP 2.390 0.001 2.390 0.001
+score TO_NO_BRKTS_HTML_IMG 1.288 1.665 1.288 1.665
+score TO_NO_BRKTS_HTML_ONLY 1.997 1.999 1.997 1.999
+score TO_NO_BRKTS_MSFT 2.497 2.499 2.497 2.499
+score TO_NO_BRKTS_NORDNS_HTML 0.001 1.185 0.001 1.185
+score TO_NO_BRKTS_PCNT 2.497 2.444 2.497 2.444
+score TVD_FROM_1 0.998 0.999 0.998 0.999
+score TVD_SPACE_ENCODED 2.498 1.417 2.498 1.417
+score TVD_SPACE_ENC_FM_MIME 1.997 1.999 1.997 1.999
+score TVD_SPACE_RATIO_MINFP 2.746 2.749 2.746 2.749
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
-score URI_DQ_UNSUB 0.001 1.989 0.001 1.989
-score URI_GOOGLE_PROXY 2.499 2.497 2.499 2.497
-score URI_ONLY_MSGID_MALF 0.001 0.426 0.001 0.426
-score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 1.261 2.211 1.261 2.211
+score URI_DQ_UNSUB 2.297 1.993 2.297 1.993
+score URI_GOOGLE_PROXY 2.497 2.399 2.497 2.399
+score URI_ONLY_MSGID_MALF 0.001 0.440 0.001 0.440
+score URI_OPTOUT_3LD 1.997 1.000 1.997 1.000
+score URI_PHISH 2.595 3.227 2.595 3.227
score URI_TRY_3LD 0.001 0.001 0.001 0.001
-score URI_TRY_USME 3.099 2.996 3.099 2.996
-score URI_WP_DIRINDEX 1.000 1.000 1.000 1.000
-score URI_WP_HACKED 2.999 2.494 2.999 2.494
-score URI_WP_HACKED_2 2.000 1.997 2.000 1.997
-score XM_PHPMAILER_FORGED 0.001 1.896 0.001 1.896
-score YOU_INHERIT 2.700 2.696 2.700 2.696
+score URI_TRY_USME 3.097 3.000 3.097 3.000
+score URI_WP_DIRINDEX 2.996 1.000 2.996 1.000
+score URI_WP_HACKED 2.996 2.495 2.996 2.495
+score URI_WP_HACKED_2 1.997 1.999 1.997 1.999
+score XM_PHPMAILER_FORGED 2.397 1.913 2.397 1.913
+score YOU_INHERIT 2.796 2.699 2.796 2.699
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1690563&r1=1690562&r2=1690563&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Mon Jul 13 02:39:24 2015
@@ -1,116 +1,130 @@
-# Using score set 0 logs for revision 1690225 from:
-# ham-axb-8mile.log ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-bb-guenther_fraud.log ham-bb-jhardin_fraud.log ham-bb-jhardin.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-traps.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-darxus.log ham-dwarren.log ham-grenier.log ham-jarif.log ham-kam-ninja.log ham-kpg-core.log spam-axb-8mile.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-bb-guenther_fraud.log spam-bb-jhardin_fraud.log spam-bb-jhardin.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-traps.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-darxus.log spam-dwarren.log spam-grenier.log spam-jarif.log spam-kam-ninja.log spam-kpg-core.log
+# Using score set 0 logs for revision 1690428 from:
+# ham-axb-8mile.log ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-bb-guenther_fraud.log ham-bb-jhardin_fraud.log ham-bb-jhardin.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-traps.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-darxus.log ham-dwarren.log ham-grenier.log ham-jarif.log ham-kam-ninja.log ham-kpg-core.log ham-zmi.log spam-axb-8mile.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-bb-guenther_fraud.log spam-bb-jhardin_fraud.log spam-bb-jhardin.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-traps.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-darxus.log spam-dwarren.log spam-grenier.log spam-jarif.log spam-kam-ninja.log spam-kpg-core.log spam-zmi.log
-score ACCT_PHISHING 1.500
-score ACCT_PHISHING_MANY 2.409
+score ACCT_PHISHING 1.498
+score ACCT_PHISHING_MANY 2.999
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_SPAMMY_URI_PATTERNS10 3.999
-score ADMITS_SPAM 2.899
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.813
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 1.501
+score AC_SPAMMY_URI_PATTERNS10 3.995
+score ADMITS_SPAM 2.896
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.500
+score ADVANCE_FEE_2_NEW_MONEY 1.998
+score ADVANCE_FEE_3_NEW 3.496
+score ADVANCE_FEE_3_NEW_FORM 0.001 # force non-zero
score ADVANCE_FEE_3_NEW_FRM_MNY 0.001 # force non-zero
-score ADVANCE_FEE_3_NEW_MONEY 2.999
-score ADVANCE_FEE_4_NEW 2.499
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.070
-score ADVANCE_FEE_4_NEW_MONEY 3.000
-score ADVANCE_FEE_5_NEW 2.699
-score ADVANCE_FEE_5_NEW_FRM_MNY 4.099
-score ADVANCE_FEE_5_NEW_MONEY 3.115
-score AD_PREFS 0.688
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.407
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.568
-score AXB_XM_FORGED_OL2600 2.301
-score AXB_X_FF_SEZ_S 2.799
+score ADVANCE_FEE_3_NEW_MONEY 3.696
+score ADVANCE_FEE_4_NEW 2.596
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.694
+score ADVANCE_FEE_4_NEW_MONEY 3.096
+score ADVANCE_FEE_5_NEW 2.796
+score ADVANCE_FEE_5_NEW_FRM_MNY 4.399
+score ADVANCE_FEE_5_NEW_MONEY 3.536
+score AD_PREFS 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 4.495
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.060
+score AXB_XM_FORGED_OL2600 2.275
+score AXB_X_FF_SEZ_S 2.498
score BODY_URI_ONLY 0.999
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.250
+score CK_HELO_DYNAMIC_SPLIT_IP 1.498
+score CK_HELO_GENERIC 0.249
+score COMMENT_GIBBERISH 1.498
score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 2.600
-score DEAR_BENEFICIARY 3.499
-score DSN_NO_MIMEVERSION 1.999
-score FBI_MONEY 1.999
-score FBI_SPOOF 1.999
-score FILL_THIS_FORM 3.499
-score FORM_FRAUD 0.001
-score FORM_FRAUD_3 1.776
-score FORM_FRAUD_5 1.235
-score FOUND_YOU 2.090
-score FREEMAIL_FORGED_FROMDOMAIN 0.001
-score FROM_MISSPACED 0.001
-score FROM_MISSP_EH_MATCH 2.000
-score FROM_MISSP_FREEMAIL 0.001
-score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 1.398
-score FROM_MISSP_REPLYTO 1.306
+score DATE_IN_FUTURE_96_Q 2.297
+score DEAR_BENEFICIARY 3.396
+score DSN_NO_MIMEVERSION 1.997
+score FBI_MONEY 1.058
+score FBI_SPOOF 1.997
+score FILL_THIS_FORM 3.496
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 2.696
+score FORM_FRAUD_5 1.583
+score FOUND_YOU 2.098
+score FREEMAIL_FORGED_FROMDOMAIN 0.002
+score FROM_MISSPACED 0.001 # force non-zero
+score FROM_MISSP_EH_MATCH 0.001
+score FROM_MISSP_FREEMAIL 2.602
+score FROM_MISSP_MSFT 0.001 # force non-zero
+score FROM_MISSP_PHISH 4.428
+score FROM_MISSP_REPLYTO 2.797
score FROM_MISSP_TO_UNDISC 0.001
score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
-score FROM_WEBSITE 3.199
-score FSL_BOTSPAM_1 1.658
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_BARE_IP_2 1.999
-score FSL_HELO_FIREWALL 2.899
-score FSL_MY_NAME_IS 3.499
-score FSL_NEW_HELO_USER 1.999
+score FROM_WEBSITE 3.096
+score FSL_BOTSPAM_1 1.476
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_HELO_BARE_IP_2 1.998
+score FSL_MY_NAME_IS 2.896
+score FSL_NEW_HELO_USER 1.600
+score FUZZY_DR_OZ 2.298
score GOOG_REDIR_NORDNS 2.699
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001
-score HEXHASH_WORD 0.508
-score HK_LOTTO 0.602
-score HK_NAME_MR_MRS 0.999
-score HK_RANDOM_FROM 1.000
-score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM_N2 2.858
-score HTML_OFF_PAGE 1.999
-score LIST_PARTIAL 1.000
-score LONG_HEX_URI 2.999
-score LOTS_OF_MONEY 0.001 # force non-zero
-score LOTTO_AGENT 2.499
+score GOOG_REDIR_SHORT 1.798
+score HDRS_LCASE 0.099
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
+score HEXHASH_WORD 2.795
+score HK_LOTTO 0.336
+score HK_LOTTO_NAME 0.998
+score HK_LOTTO_SUBJECT 0.998
+score HK_NAME_MR_MRS 0.998
+score HK_RANDOM_FROM 0.998
+score HK_RANDOM_REPLYTO 0.998
+score HK_SCAM_N2 2.151
+score HTML_OFF_PAGE 1.998
+score LIST_PARTIAL 0.998
+score LONG_HEX_URI 2.996
+score LOTS_OF_MONEY 0.010
+score LOTTO_AGENT 2.497
+score LOTTO_AGENT_RPLY 2.035
score LOTTO_DEPT 0.001
-score MILLION_USD 1.015
-score MIME_NO_TEXT 1.999
-score MONEY_ATM_CARD 2.784
+score LOTTO_URI 0.001
+score MANY_SPAN_IN_TEXT 2.197
+score MILLION_USD 1.997
+score MIME_NO_TEXT 1.998
+score MONEY_ATM_CARD 2.772
score MONEY_FORM 0.001 # force non-zero
-score MONEY_FRAUD_3 3.399
-score MONEY_FRAUD_5 1.870
-score MONEY_FRAUD_8 2.003
-score MONEY_FROM_41 1.999
-score MONEY_FROM_MISSP 0.001
-score MSGID_NOFQDN1 3.699
-score NAME_EMAIL_DIFF 3.599
-score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.548
-score PDS_FROM_2_EMAILS 3.899
-score PHISHING_FREEMAIL 2.843
+score MONEY_FRAUD_3 3.096
+score MONEY_FRAUD_5 1.865
+score MONEY_FRAUD_8 1.593
+score MONEY_FROM_41 1.997
+score MONEY_FROM_MISSP 1.997
+score MSGID_NOFQDN1 3.696
+score NAME_EMAIL_DIFF 3.795
+score NSL_RCVD_FROM_USER 1.944
+score NSL_RCVD_HELO_USER 0.998
+score OBFU_TEXT_ATTACH 2.196
+score PDS_FROM_2_EMAILS 3.996
+score PHISHING_FREEMAIL 3.096
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RISK_FREE 2.699
-score RP_MATCHES_RCVD -1.535
-score SERGIO_SUBJECT_VIAGRA01 2.100
-score SPOOFED_FREEM_REPTO 1.999
-score SPOOFED_FREEM_REPTO_CHN 2.000
-score STYLE_GIBBERISH 3.012
-score TAB_IN_FROM 0.500
-score THIS_AD 0.697
-score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_FROM_MSSP 1.301
-score TO_NO_BRKTS_HTML_IMG 0.516
-score TO_NO_BRKTS_HTML_ONLY 0.001
-score TO_NO_BRKTS_MSFT 2.499
-score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 1.486
-score TVD_FROM_1 1.000
-score TVD_SPACE_ENCODED 2.499
-score TVD_SPACE_ENC_FM_MIME 1.999
-score TVD_SPACE_RATIO_MINFP 2.749
-score URI_GOOGLE_PROXY 2.499
+score RISK_FREE 2.897
+score RP_MATCHES_RCVD -1.050
+score SERGIO_SUBJECT_VIAGRA01 2.045
+score SPOOFED_FREEM_REPTO 1.997
+score SPOOFED_FREEM_REPTO_CHN 1.998
+score STYLE_GIBBERISH 3.235
+score TAB_IN_FROM 0.498
+score THIS_AD 2.086
+score TO_IN_SUBJ 0.099
+score TO_NO_BRKTS_FROM_MSSP 2.390
+score TO_NO_BRKTS_HTML_IMG 1.288
+score TO_NO_BRKTS_HTML_ONLY 1.997
+score TO_NO_BRKTS_MSFT 2.497
+score TO_NO_BRKTS_NORDNS_HTML 0.001 # force non-zero
+score TO_NO_BRKTS_PCNT 2.497
+score TVD_FROM_1 0.998
+score TVD_SPACE_ENCODED 2.498
+score TVD_SPACE_ENC_FM_MIME 1.997
+score TVD_SPACE_RATIO_MINFP 2.746
+score URI_DQ_UNSUB 2.297
+score URI_GOOGLE_PROXY 2.497
score URI_ONLY_MSGID_MALF 0.001
-score URI_PHISH 1.261
-score URI_TRY_3LD 0.001
-score URI_TRY_USME 3.099
-score URI_WP_HACKED 2.999
-score URI_WP_HACKED_2 2.000
-score YOU_INHERIT 2.700
+score URI_OPTOUT_3LD 1.997
+score URI_PHISH 2.595
+score URI_TRY_3LD 0.001 # force non-zero
+score URI_TRY_USME 3.097
+score URI_WP_DIRINDEX 2.996
+score URI_WP_HACKED 2.996
+score URI_WP_HACKED_2 1.997
+score XM_PHPMAILER_FORGED 2.397
+score YOU_INHERIT 2.796
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -122,7 +136,6 @@ score AC_SPAMMY_URI_PATTERNS8 1.0
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000
score CANT_SEE_AD 1.000
-score COMMENT_GIBBERISH 1.000
score FORM_LOW_CONTRAST 1.000
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
@@ -140,8 +153,6 @@ score STOCK_LOW_CONTRAST 1.0
score SYSADMIN 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
-score URI_OPTOUT_3LD 1.000
-score URI_WP_DIRINDEX 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
score RCVD_IN_MSPIKE_BL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1690563&r1=1690562&r2=1690563&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Mon Jul 13 02:39:24 2015
@@ -1,132 +1,133 @@
# Using score set 1 logs for revision 1690357 from:
# ham-net-axb-8mile.log ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-bb-guenther_fraud.log ham-net-bb-jhardin_fraud.log ham-net-bb-jhardin.log ham-net-bb-jm.log ham-net-bb-kmcgrail.log ham-net-bb-traps.log ham-net-bb-zmi.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bpoliakoff.log ham-net-darxus.log ham-net-dwarren.log ham-net-grenier.log ham-net-jarif.log ham-net-kam-ninja.log ham-net-kpg-core.log ham-net-zmi.log spam-net-axb-8mile.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin_fraud.log spam-net-bb-jhardin.log spam-net-bb-jm.log spam-net-bb-kmcgrail.log spam-net-bb-traps.log spam-net-bb-zmi.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bpoliakoff.log spam-net-darxus.log spam-net-dwarren.log spam-net-grenier.log spam-net-jarif.log spam-net-kam-ninja.log spam-net-kpg-core.log spam-net-zmi.log
-score ACCT_PHISHING 1.498
-score ACCT_PHISHING_MANY 2.999
+score ACCT_PHISHING 1.499
+score ACCT_PHISHING_MANY 1.462
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_SPAMMY_URI_PATTERNS10 2.036
-score ADMITS_SPAM 2.796
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.805
-score ADVANCE_FEE_2_NEW_MONEY 1.997
-score ADVANCE_FEE_3_NEW 3.496
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.593
-score ADVANCE_FEE_3_NEW_MONEY 3.096
-score ADVANCE_FEE_4_NEW 2.596
-score ADVANCE_FEE_4_NEW_FRM_MNY 1.288
-score ADVANCE_FEE_4_NEW_MONEY 3.096
-score ADVANCE_FEE_5_NEW 2.697
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.066
-score ADVANCE_FEE_5_NEW_MONEY 3.595
-score AD_PREFS 1.641
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.903
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.297
-score AXB_XM_FORGED_OL2600 1.979
-score AXB_X_FF_SEZ_S 2.696
-score BODY_URI_ONLY 0.840
-score CK_HELO_DYNAMIC_SPLIT_IP 1.498
-score CK_HELO_GENERIC 0.248
-score COMMENT_GIBBERISH 1.498
+score AC_SPAMMY_URI_PATTERNS10 1.748
+score ADMITS_SPAM 2.799
+score ADVANCE_FEE_2_NEW_FRM_MNY 1.028
+score ADVANCE_FEE_2_NEW_MONEY 1.999
+score ADVANCE_FEE_3_NEW 2.516
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.587
+score ADVANCE_FEE_3_NEW_MONEY 3.099
+score ADVANCE_FEE_4_NEW 2.499
+score ADVANCE_FEE_4_NEW_FRM_MNY 2.328
+score ADVANCE_FEE_4_NEW_MONEY 3.099
+score ADVANCE_FEE_5_NEW 2.699
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.633
+score ADVANCE_FEE_5_NEW_MONEY 2.946
+score AD_PREFS 1.699
+score AXB_XMAILER_MIMEOLE_OL_024C2 2.921
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.277
+score AXB_XM_FORGED_OL2600 1.953
+score AXB_X_FF_SEZ_S 2.245
+score BODY_URI_ONLY 0.834
+score CK_HELO_DYNAMIC_SPLIT_IP 1.500
+score CK_HELO_GENERIC 0.250
+score COMMENT_GIBBERISH 1.499
score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 2.298
-score DEAR_BENEFICIARY 3.396
-score DSN_NO_MIMEVERSION 1.997
-score FBI_MONEY 1.999
-score FBI_SPOOF 1.997
-score FILL_THIS_FORM 1.651
+score DATE_IN_FUTURE_96_Q 2.299
+score DEAR_BENEFICIARY 3.399
+score DSN_NO_MIMEVERSION 1.999
+score FBI_MONEY 1.497
+score FBI_SPOOF 1.999
+score FILL_THIS_FORM 1.662
score FORM_FRAUD 0.998
-score FORM_FRAUD_3 2.669
-score FORM_FRAUD_5 2.284
-score FOUND_YOU 1.015
-score FREEMAIL_FORGED_FROMDOMAIN 0.248
+score FORM_FRAUD_3 1.909
+score FORM_FRAUD_5 1.915
+score FOUND_YOU 1.017
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
score FROM_MISSPACED 0.001
-score FROM_MISSP_EH_MATCH 1.997
-score FROM_MISSP_FREEMAIL 0.780
-score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 3.233
-score FROM_MISSP_REPLYTO 0.001
-score FROM_MISSP_TO_UNDISC 0.001
-score FROM_MISSP_USER 0.001
-score FROM_MISSP_XPRIO 0.001
-score FROM_WEBSITE 0.293
-score FSL_BOTSPAM_1 2.272
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_BARE_IP_2 1.676
-score FSL_HELO_FIREWALL 2.596
-score FSL_MY_NAME_IS 2.896
-score FSL_NEW_HELO_USER 0.840
-score FUZZY_DR_OZ 2.297
-score GOOG_REDIR_NORDNS 1.981
+score FROM_MISSP_EH_MATCH 1.999
+score FROM_MISSP_FREEMAIL 3.861
+score FROM_MISSP_MSFT 0.773
+score FROM_MISSP_PHISH 3.568
+score FROM_MISSP_REPLYTO 2.788
+score FROM_MISSP_TO_UNDISC 3.599
+score FROM_MISSP_USER 0.659
+score FROM_MISSP_XPRIO 2.499
+score FROM_WEBSITE 2.959
+score FSL_BOTSPAM_1 2.172
+score FSL_CTYPE_WIN1251 0.357
+score FSL_HELO_BARE_IP_2 1.688
+score FSL_HELO_FIREWALL 2.599
+score FSL_MY_NAME_IS 2.900
+score FSL_NEW_HELO_USER 0.852
+score GOOG_REDIR_NORDNS 0.895
score HEADER_FROM_DIFFERENT_DOMAINS 0.001
-score HEXHASH_WORD 2.996
-score HK_LOTTO 0.551
-score HK_LOTTO_NAME 0.998
+score HEXHASH_WORD 2.999
+score HK_LOTTO 0.548
+score HK_LOTTO_NAME 1.000
score HK_LOTTO_SUBJECT 0.999
score HK_NAME_MR_MRS 0.001 # force non-zero
-score HK_RANDOM_FROM 0.998
+score HK_RANDOM_FROM 1.000
score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM_N2 2.234
-score HTML_OFF_PAGE 1.997
-score LIST_PARTIAL 0.998
-score LONG_HEX_URI 1.423
+score HK_SCAM_N2 2.366
+score HTML_OFF_PAGE 1.999
+score LIST_PARTIAL 1.000
+score LONG_HEX_URI 1.504
score LOTS_OF_MONEY 0.010
score LOTTO_AGENT 2.499
-score LOTTO_AGENT_RPLY 2.855
+score LOTTO_AGENT_RPLY 1.767
score LOTTO_DEPT 0.001
score LOTTO_URI 0.001
-score MANY_SPAN_IN_TEXT 2.197
-score MILLION_USD 0.686
-score MIME_NO_TEXT 1.997
-score MONEY_ATM_CARD 2.899
+score MANY_SPAN_IN_TEXT 2.200
+score MILLION_USD 0.689
+score MIME_NO_TEXT 1.999
+score MONEY_ATM_CARD 1.630
score MONEY_FORM 0.001
-score MONEY_FRAUD_3 3.296
-score MONEY_FRAUD_5 3.624
-score MONEY_FRAUD_8 2.241
-score MONEY_FROM_41 1.997
+score MONEY_FRAUD_3 3.299
+score MONEY_FRAUD_5 3.733
+score MONEY_FRAUD_8 3.460
+score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
-score MSGID_NOFQDN1 3.695
-score NAME_EMAIL_DIFF 0.431
-score NSL_RCVD_FROM_USER 0.403
-score NSL_RCVD_HELO_USER 2.558
-score OBFU_TEXT_ATTACH 1.367
-score PDS_FROM_2_EMAILS 0.617
-score PHISHING_FREEMAIL 2.602
+score MSGID_NOFQDN1 3.699
+score NAME_EMAIL_DIFF 0.584
+score NSL_RCVD_FROM_USER 4.489
+score NSL_RCVD_HELO_USER 2.533
+score OBFU_DOC_ATTACH 2.900
+score OBFU_JPG_ATTACH 2.658
+score OBFU_TEXT_ATTACH 2.167
+score PDS_FROM_2_EMAILS 0.467
+score PHISHING_FREEMAIL 2.578
score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
-score RCVD_IN_MSPIKE_L3 1.499
-score RCVD_IN_MSPIKE_L4 2.497
-score RCVD_IN_MSPIKE_L5 3.196
-score RCVD_IN_MSPIKE_ZBI 1.523
-score RISK_FREE 2.796
-score RP_MATCHES_RCVD -1.405
-score SERGIO_SUBJECT_VIAGRA01 2.571
-score SPOOFED_FREEM_REPTO 1.998
-score SPOOFED_FREEM_REPTO_CHN 1.998
-score STYLE_GIBBERISH 3.496
-score TAB_IN_FROM 0.265
-score THIS_AD 1.868
-score TO_EQ_FM_DOM_SPF_FAIL 1.855
-score TO_IN_SUBJ 0.099
-score TO_NO_BRKTS_FROM_MSSP 0.283
-score TO_NO_BRKTS_HTML_IMG 1.657
-score TO_NO_BRKTS_HTML_ONLY 1.997
-score TO_NO_BRKTS_MSFT 2.497
-score TO_NO_BRKTS_NORDNS_HTML 0.961
-score TO_NO_BRKTS_PCNT 2.484
-score TVD_FROM_1 0.998
-score TVD_SPACE_ENCODED 1.409
-score TVD_SPACE_ENC_FM_MIME 1.997
-score TVD_SPACE_RATIO_MINFP 2.746
-score URI_DQ_UNSUB 1.989
-score URI_GOOGLE_PROXY 2.497
-score URI_ONLY_MSGID_MALF 0.426
-score URI_PHISH 2.211
+score RCVD_IN_MSPIKE_H2 -0.001
+score RCVD_IN_MSPIKE_L3 1.500
+score RCVD_IN_MSPIKE_L4 2.499
+score RCVD_IN_MSPIKE_L5 3.199
+score RCVD_IN_MSPIKE_ZBI 1.525
+score RISK_FREE 2.799
+score RP_MATCHES_RCVD -1.428
+score SERGIO_SUBJECT_VIAGRA01 2.864
+score SPOOFED_FREEM_REPTO 1.999
+score SPOOFED_FREEM_REPTO_CHN 1.999
+score STYLE_GIBBERISH 3.499
+score TAB_IN_FROM 0.466
+score THIS_AD 1.672
+score TO_EQ_FM_DOM_SPF_FAIL 1.807
+score TO_IN_SUBJ 0.100
+score TO_NO_BRKTS_FROM_MSSP 0.001
+score TO_NO_BRKTS_HTML_IMG 1.665
+score TO_NO_BRKTS_HTML_ONLY 1.999
+score TO_NO_BRKTS_MSFT 2.499
+score TO_NO_BRKTS_NORDNS_HTML 1.185
+score TO_NO_BRKTS_PCNT 2.444
+score TVD_FROM_1 0.999
+score TVD_SPACE_ENCODED 1.417
+score TVD_SPACE_ENC_FM_MIME 1.999
+score TVD_SPACE_RATIO_MINFP 2.749
+score URI_DQ_UNSUB 1.993
+score URI_GOOGLE_PROXY 2.399
+score URI_ONLY_MSGID_MALF 0.440
+score URI_PHISH 3.227
score URI_TRY_3LD 0.001
-score URI_TRY_USME 2.996
-score URI_WP_HACKED 2.494
-score URI_WP_HACKED_2 1.997
-score XM_PHPMAILER_FORGED 1.896
-score YOU_INHERIT 2.696
+score URI_TRY_USME 3.000
+score URI_WP_HACKED 2.495
+score URI_WP_HACKED_2 1.999
+score XM_PHPMAILER_FORGED 1.913
+score YOU_INHERIT 2.699
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1690563&r1=1690562&r2=1690563&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Mon Jul 13 02:39:24 2015
@@ -1,116 +1,130 @@
-# Using score set 0 logs for revision 1690225 from:
-# ham-axb-8mile.log ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-bb-guenther_fraud.log ham-bb-jhardin_fraud.log ham-bb-jhardin.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-traps.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-darxus.log ham-dwarren.log ham-grenier.log ham-jarif.log ham-kam-ninja.log ham-kpg-core.log spam-axb-8mile.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-bb-guenther_fraud.log spam-bb-jhardin_fraud.log spam-bb-jhardin.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-traps.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-darxus.log spam-dwarren.log spam-grenier.log spam-jarif.log spam-kam-ninja.log spam-kpg-core.log
+# Using score set 0 logs for revision 1690428 from:
+# ham-axb-8mile.log ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-bb-guenther_fraud.log ham-bb-jhardin_fraud.log ham-bb-jhardin.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-traps.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-darxus.log ham-dwarren.log ham-grenier.log ham-jarif.log ham-kam-ninja.log ham-kpg-core.log ham-zmi.log spam-axb-8mile.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-bb-guenther_fraud.log spam-bb-jhardin_fraud.log spam-bb-jhardin.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-traps.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-darxus.log spam-dwarren.log spam-grenier.log spam-jarif.log spam-kam-ninja.log spam-kpg-core.log spam-zmi.log
-score ACCT_PHISHING 1.500
-score ACCT_PHISHING_MANY 2.409
+score ACCT_PHISHING 1.498
+score ACCT_PHISHING_MANY 2.999
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_SPAMMY_URI_PATTERNS10 3.999
-score ADMITS_SPAM 2.899
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.813
-score ADVANCE_FEE_2_NEW_MONEY 1.999
-score ADVANCE_FEE_3_NEW 1.501
+score AC_SPAMMY_URI_PATTERNS10 3.995
+score ADMITS_SPAM 2.896
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.500
+score ADVANCE_FEE_2_NEW_MONEY 1.998
+score ADVANCE_FEE_3_NEW 3.496
+score ADVANCE_FEE_3_NEW_FORM 0.001 # force non-zero
score ADVANCE_FEE_3_NEW_FRM_MNY 0.001 # force non-zero
-score ADVANCE_FEE_3_NEW_MONEY 2.999
-score ADVANCE_FEE_4_NEW 2.499
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.070
-score ADVANCE_FEE_4_NEW_MONEY 3.000
-score ADVANCE_FEE_5_NEW 2.699
-score ADVANCE_FEE_5_NEW_FRM_MNY 4.099
-score ADVANCE_FEE_5_NEW_MONEY 3.115
-score AD_PREFS 0.688
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.407
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.568
-score AXB_XM_FORGED_OL2600 2.301
-score AXB_X_FF_SEZ_S 2.799
+score ADVANCE_FEE_3_NEW_MONEY 3.696
+score ADVANCE_FEE_4_NEW 2.596
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.694
+score ADVANCE_FEE_4_NEW_MONEY 3.096
+score ADVANCE_FEE_5_NEW 2.796
+score ADVANCE_FEE_5_NEW_FRM_MNY 4.399
+score ADVANCE_FEE_5_NEW_MONEY 3.536
+score AD_PREFS 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 4.495
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.060
+score AXB_XM_FORGED_OL2600 2.275
+score AXB_X_FF_SEZ_S 2.498
score BODY_URI_ONLY 0.999
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.250
+score CK_HELO_DYNAMIC_SPLIT_IP 1.498
+score CK_HELO_GENERIC 0.249
+score COMMENT_GIBBERISH 1.498
score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 2.600
-score DEAR_BENEFICIARY 3.499
-score DSN_NO_MIMEVERSION 1.999
-score FBI_MONEY 1.999
-score FBI_SPOOF 1.999
-score FILL_THIS_FORM 3.499
-score FORM_FRAUD 0.001
-score FORM_FRAUD_3 1.776
-score FORM_FRAUD_5 1.235
-score FOUND_YOU 2.090
-score FREEMAIL_FORGED_FROMDOMAIN 0.001
-score FROM_MISSPACED 0.001
-score FROM_MISSP_EH_MATCH 2.000
-score FROM_MISSP_FREEMAIL 0.001
-score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 1.398
-score FROM_MISSP_REPLYTO 1.306
+score DATE_IN_FUTURE_96_Q 2.297
+score DEAR_BENEFICIARY 3.396
+score DSN_NO_MIMEVERSION 1.997
+score FBI_MONEY 1.058
+score FBI_SPOOF 1.997
+score FILL_THIS_FORM 3.496
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 2.696
+score FORM_FRAUD_5 1.583
+score FOUND_YOU 2.098
+score FREEMAIL_FORGED_FROMDOMAIN 0.002
+score FROM_MISSPACED 0.001 # force non-zero
+score FROM_MISSP_EH_MATCH 0.001
+score FROM_MISSP_FREEMAIL 2.602
+score FROM_MISSP_MSFT 0.001 # force non-zero
+score FROM_MISSP_PHISH 4.428
+score FROM_MISSP_REPLYTO 2.797
score FROM_MISSP_TO_UNDISC 0.001
score FROM_MISSP_USER 0.001
score FROM_MISSP_XPRIO 0.001
-score FROM_WEBSITE 3.199
-score FSL_BOTSPAM_1 1.658
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_BARE_IP_2 1.999
-score FSL_HELO_FIREWALL 2.899
-score FSL_MY_NAME_IS 3.499
-score FSL_NEW_HELO_USER 1.999
+score FROM_WEBSITE 3.096
+score FSL_BOTSPAM_1 1.476
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_HELO_BARE_IP_2 1.998
+score FSL_MY_NAME_IS 2.896
+score FSL_NEW_HELO_USER 1.600
+score FUZZY_DR_OZ 2.298
score GOOG_REDIR_NORDNS 2.699
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001
-score HEXHASH_WORD 0.508
-score HK_LOTTO 0.602
-score HK_NAME_MR_MRS 0.999
-score HK_RANDOM_FROM 1.000
-score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM_N2 2.858
-score HTML_OFF_PAGE 1.999
-score LIST_PARTIAL 1.000
-score LONG_HEX_URI 2.999
-score LOTS_OF_MONEY 0.001 # force non-zero
-score LOTTO_AGENT 2.499
+score GOOG_REDIR_SHORT 1.798
+score HDRS_LCASE 0.099
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
+score HEXHASH_WORD 2.795
+score HK_LOTTO 0.336
+score HK_LOTTO_NAME 0.998
+score HK_LOTTO_SUBJECT 0.998
+score HK_NAME_MR_MRS 0.998
+score HK_RANDOM_FROM 0.998
+score HK_RANDOM_REPLYTO 0.998
+score HK_SCAM_N2 2.151
+score HTML_OFF_PAGE 1.998
+score LIST_PARTIAL 0.998
+score LONG_HEX_URI 2.996
+score LOTS_OF_MONEY 0.010
+score LOTTO_AGENT 2.497
+score LOTTO_AGENT_RPLY 2.035
score LOTTO_DEPT 0.001
-score MILLION_USD 1.015
-score MIME_NO_TEXT 1.999
-score MONEY_ATM_CARD 2.784
+score LOTTO_URI 0.001
+score MANY_SPAN_IN_TEXT 2.197
+score MILLION_USD 1.997
+score MIME_NO_TEXT 1.998
+score MONEY_ATM_CARD 2.772
score MONEY_FORM 0.001 # force non-zero
-score MONEY_FRAUD_3 3.399
-score MONEY_FRAUD_5 1.870
-score MONEY_FRAUD_8 2.003
-score MONEY_FROM_41 1.999
-score MONEY_FROM_MISSP 0.001
-score MSGID_NOFQDN1 3.699
-score NAME_EMAIL_DIFF 3.599
-score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.548
-score PDS_FROM_2_EMAILS 3.899
-score PHISHING_FREEMAIL 2.843
+score MONEY_FRAUD_3 3.096
+score MONEY_FRAUD_5 1.865
+score MONEY_FRAUD_8 1.593
+score MONEY_FROM_41 1.997
+score MONEY_FROM_MISSP 1.997
+score MSGID_NOFQDN1 3.696
+score NAME_EMAIL_DIFF 3.795
+score NSL_RCVD_FROM_USER 1.944
+score NSL_RCVD_HELO_USER 0.998
+score OBFU_TEXT_ATTACH 2.196
+score PDS_FROM_2_EMAILS 3.996
+score PHISHING_FREEMAIL 3.096
score PP_MIME_FAKE_ASCII_TEXT 0.999
-score RISK_FREE 2.699
-score RP_MATCHES_RCVD -1.535
-score SERGIO_SUBJECT_VIAGRA01 2.100
-score SPOOFED_FREEM_REPTO 1.999
-score SPOOFED_FREEM_REPTO_CHN 2.000
-score STYLE_GIBBERISH 3.012
-score TAB_IN_FROM 0.500
-score THIS_AD 0.697
-score TO_IN_SUBJ 0.100
-score TO_NO_BRKTS_FROM_MSSP 1.301
-score TO_NO_BRKTS_HTML_IMG 0.516
-score TO_NO_BRKTS_HTML_ONLY 0.001
-score TO_NO_BRKTS_MSFT 2.499
-score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 1.486
-score TVD_FROM_1 1.000
-score TVD_SPACE_ENCODED 2.499
-score TVD_SPACE_ENC_FM_MIME 1.999
-score TVD_SPACE_RATIO_MINFP 2.749
-score URI_GOOGLE_PROXY 2.499
+score RISK_FREE 2.897
+score RP_MATCHES_RCVD -1.050
+score SERGIO_SUBJECT_VIAGRA01 2.045
+score SPOOFED_FREEM_REPTO 1.997
+score SPOOFED_FREEM_REPTO_CHN 1.998
+score STYLE_GIBBERISH 3.235
+score TAB_IN_FROM 0.498
+score THIS_AD 2.086
+score TO_IN_SUBJ 0.099
+score TO_NO_BRKTS_FROM_MSSP 2.390
+score TO_NO_BRKTS_HTML_IMG 1.288
+score TO_NO_BRKTS_HTML_ONLY 1.997
+score TO_NO_BRKTS_MSFT 2.497
+score TO_NO_BRKTS_NORDNS_HTML 0.001 # force non-zero
+score TO_NO_BRKTS_PCNT 2.497
+score TVD_FROM_1 0.998
+score TVD_SPACE_ENCODED 2.498
+score TVD_SPACE_ENC_FM_MIME 1.997
+score TVD_SPACE_RATIO_MINFP 2.746
+score URI_DQ_UNSUB 2.297
+score URI_GOOGLE_PROXY 2.497
score URI_ONLY_MSGID_MALF 0.001
-score URI_PHISH 1.261
-score URI_TRY_3LD 0.001
-score URI_TRY_USME 3.099
-score URI_WP_HACKED 2.999
-score URI_WP_HACKED_2 2.000
-score YOU_INHERIT 2.700
+score URI_OPTOUT_3LD 1.997
+score URI_PHISH 2.595
+score URI_TRY_3LD 0.001 # force non-zero
+score URI_TRY_USME 3.097
+score URI_WP_DIRINDEX 2.996
+score URI_WP_HACKED 2.996
+score URI_WP_HACKED_2 1.997
+score XM_PHPMAILER_FORGED 2.397
+score YOU_INHERIT 2.796
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -122,7 +136,6 @@ score AC_SPAMMY_URI_PATTERNS8 1.0
score AC_SPAMMY_URI_PATTERNS9 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000
score CANT_SEE_AD 1.000
-score COMMENT_GIBBERISH 1.000
score FORM_LOW_CONTRAST 1.000
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
@@ -140,8 +153,6 @@ score STOCK_LOW_CONTRAST 1.0
score SYSADMIN 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
-score URI_OPTOUT_3LD 1.000
-score URI_WP_DIRINDEX 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
score RCVD_IN_MSPIKE_BL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1690563&r1=1690562&r2=1690563&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Mon Jul 13 02:39:24 2015
@@ -1,132 +1,133 @@
# Using score set 1 logs for revision 1690357 from:
# ham-net-axb-8mile.log ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-bb-guenther_fraud.log ham-net-bb-jhardin_fraud.log ham-net-bb-jhardin.log ham-net-bb-jm.log ham-net-bb-kmcgrail.log ham-net-bb-traps.log ham-net-bb-zmi.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bpoliakoff.log ham-net-darxus.log ham-net-dwarren.log ham-net-grenier.log ham-net-jarif.log ham-net-kam-ninja.log ham-net-kpg-core.log ham-net-zmi.log spam-net-axb-8mile.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin_fraud.log spam-net-bb-jhardin.log spam-net-bb-jm.log spam-net-bb-kmcgrail.log spam-net-bb-traps.log spam-net-bb-zmi.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bpoliakoff.log spam-net-darxus.log spam-net-dwarren.log spam-net-grenier.log spam-net-jarif.log spam-net-kam-ninja.log spam-net-kpg-core.log spam-net-zmi.log
-score ACCT_PHISHING 1.498
-score ACCT_PHISHING_MANY 2.999
+score ACCT_PHISHING 1.499
+score ACCT_PHISHING_MANY 1.462
score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_SPAMMY_URI_PATTERNS10 2.036
-score ADMITS_SPAM 2.796
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.805
-score ADVANCE_FEE_2_NEW_MONEY 1.997
-score ADVANCE_FEE_3_NEW 3.496
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.593
-score ADVANCE_FEE_3_NEW_MONEY 3.096
-score ADVANCE_FEE_4_NEW 2.596
-score ADVANCE_FEE_4_NEW_FRM_MNY 1.288
-score ADVANCE_FEE_4_NEW_MONEY 3.096
-score ADVANCE_FEE_5_NEW 2.697
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.066
-score ADVANCE_FEE_5_NEW_MONEY 3.595
-score AD_PREFS 1.641
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.903
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.297
-score AXB_XM_FORGED_OL2600 1.979
-score AXB_X_FF_SEZ_S 2.696
-score BODY_URI_ONLY 0.840
-score CK_HELO_DYNAMIC_SPLIT_IP 1.498
-score CK_HELO_GENERIC 0.248
-score COMMENT_GIBBERISH 1.498
+score AC_SPAMMY_URI_PATTERNS10 1.748
+score ADMITS_SPAM 2.799
+score ADVANCE_FEE_2_NEW_FRM_MNY 1.028
+score ADVANCE_FEE_2_NEW_MONEY 1.999
+score ADVANCE_FEE_3_NEW 2.516
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.587
+score ADVANCE_FEE_3_NEW_MONEY 3.099
+score ADVANCE_FEE_4_NEW 2.499
+score ADVANCE_FEE_4_NEW_FRM_MNY 2.328
+score ADVANCE_FEE_4_NEW_MONEY 3.099
+score ADVANCE_FEE_5_NEW 2.699
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.633
+score ADVANCE_FEE_5_NEW_MONEY 2.946
+score AD_PREFS 1.699
+score AXB_XMAILER_MIMEOLE_OL_024C2 2.921
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.277
+score AXB_XM_FORGED_OL2600 1.953
+score AXB_X_FF_SEZ_S 2.245
+score BODY_URI_ONLY 0.834
+score CK_HELO_DYNAMIC_SPLIT_IP 1.500
+score CK_HELO_GENERIC 0.250
+score COMMENT_GIBBERISH 1.499
score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 2.298
-score DEAR_BENEFICIARY 3.396
-score DSN_NO_MIMEVERSION 1.997
-score FBI_MONEY 1.999
-score FBI_SPOOF 1.997
-score FILL_THIS_FORM 1.651
+score DATE_IN_FUTURE_96_Q 2.299
+score DEAR_BENEFICIARY 3.399
+score DSN_NO_MIMEVERSION 1.999
+score FBI_MONEY 1.497
+score FBI_SPOOF 1.999
+score FILL_THIS_FORM 1.662
score FORM_FRAUD 0.998
-score FORM_FRAUD_3 2.669
-score FORM_FRAUD_5 2.284
-score FOUND_YOU 1.015
-score FREEMAIL_FORGED_FROMDOMAIN 0.248
+score FORM_FRAUD_3 1.909
+score FORM_FRAUD_5 1.915
+score FOUND_YOU 1.017
+score FREEMAIL_FORGED_FROMDOMAIN 0.249
score FROM_MISSPACED 0.001
-score FROM_MISSP_EH_MATCH 1.997
-score FROM_MISSP_FREEMAIL 0.780
-score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 3.233
-score FROM_MISSP_REPLYTO 0.001
-score FROM_MISSP_TO_UNDISC 0.001
-score FROM_MISSP_USER 0.001
-score FROM_MISSP_XPRIO 0.001
-score FROM_WEBSITE 0.293
-score FSL_BOTSPAM_1 2.272
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_BARE_IP_2 1.676
-score FSL_HELO_FIREWALL 2.596
-score FSL_MY_NAME_IS 2.896
-score FSL_NEW_HELO_USER 0.840
-score FUZZY_DR_OZ 2.297
-score GOOG_REDIR_NORDNS 1.981
+score FROM_MISSP_EH_MATCH 1.999
+score FROM_MISSP_FREEMAIL 3.861
+score FROM_MISSP_MSFT 0.773
+score FROM_MISSP_PHISH 3.568
+score FROM_MISSP_REPLYTO 2.788
+score FROM_MISSP_TO_UNDISC 3.599
+score FROM_MISSP_USER 0.659
+score FROM_MISSP_XPRIO 2.499
+score FROM_WEBSITE 2.959
+score FSL_BOTSPAM_1 2.172
+score FSL_CTYPE_WIN1251 0.357
+score FSL_HELO_BARE_IP_2 1.688
+score FSL_HELO_FIREWALL 2.599
+score FSL_MY_NAME_IS 2.900
+score FSL_NEW_HELO_USER 0.852
+score GOOG_REDIR_NORDNS 0.895
score HEADER_FROM_DIFFERENT_DOMAINS 0.001
-score HEXHASH_WORD 2.996
-score HK_LOTTO 0.551
-score HK_LOTTO_NAME 0.998
+score HEXHASH_WORD 2.999
+score HK_LOTTO 0.548
+score HK_LOTTO_NAME 1.000
score HK_LOTTO_SUBJECT 0.999
score HK_NAME_MR_MRS 0.001 # force non-zero
-score HK_RANDOM_FROM 0.998
+score HK_RANDOM_FROM 1.000
score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM_N2 2.234
-score HTML_OFF_PAGE 1.997
-score LIST_PARTIAL 0.998
-score LONG_HEX_URI 1.423
+score HK_SCAM_N2 2.366
+score HTML_OFF_PAGE 1.999
+score LIST_PARTIAL 1.000
+score LONG_HEX_URI 1.504
score LOTS_OF_MONEY 0.010
score LOTTO_AGENT 2.499
-score LOTTO_AGENT_RPLY 2.855
+score LOTTO_AGENT_RPLY 1.767
score LOTTO_DEPT 0.001
score LOTTO_URI 0.001
-score MANY_SPAN_IN_TEXT 2.197
-score MILLION_USD 0.686
-score MIME_NO_TEXT 1.997
-score MONEY_ATM_CARD 2.899
+score MANY_SPAN_IN_TEXT 2.200
+score MILLION_USD 0.689
+score MIME_NO_TEXT 1.999
+score MONEY_ATM_CARD 1.630
score MONEY_FORM 0.001
-score MONEY_FRAUD_3 3.296
-score MONEY_FRAUD_5 3.624
-score MONEY_FRAUD_8 2.241
-score MONEY_FROM_41 1.997
+score MONEY_FRAUD_3 3.299
+score MONEY_FRAUD_5 3.733
+score MONEY_FRAUD_8 3.460
+score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
-score MSGID_NOFQDN1 3.695
-score NAME_EMAIL_DIFF 0.431
-score NSL_RCVD_FROM_USER 0.403
-score NSL_RCVD_HELO_USER 2.558
-score OBFU_TEXT_ATTACH 1.367
-score PDS_FROM_2_EMAILS 0.617
-score PHISHING_FREEMAIL 2.602
+score MSGID_NOFQDN1 3.699
+score NAME_EMAIL_DIFF 0.584
+score NSL_RCVD_FROM_USER 4.489
+score NSL_RCVD_HELO_USER 2.533
+score OBFU_DOC_ATTACH 2.900
+score OBFU_JPG_ATTACH 2.658
+score OBFU_TEXT_ATTACH 2.167
+score PDS_FROM_2_EMAILS 0.467
+score PHISHING_FREEMAIL 2.578
score PP_MIME_FAKE_ASCII_TEXT 0.001
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
-score RCVD_IN_MSPIKE_L3 1.499
-score RCVD_IN_MSPIKE_L4 2.497
-score RCVD_IN_MSPIKE_L5 3.196
-score RCVD_IN_MSPIKE_ZBI 1.523
-score RISK_FREE 2.796
-score RP_MATCHES_RCVD -1.405
-score SERGIO_SUBJECT_VIAGRA01 2.571
-score SPOOFED_FREEM_REPTO 1.998
-score SPOOFED_FREEM_REPTO_CHN 1.998
-score STYLE_GIBBERISH 3.496
-score TAB_IN_FROM 0.265
-score THIS_AD 1.868
-score TO_EQ_FM_DOM_SPF_FAIL 1.855
-score TO_IN_SUBJ 0.099
-score TO_NO_BRKTS_FROM_MSSP 0.283
-score TO_NO_BRKTS_HTML_IMG 1.657
-score TO_NO_BRKTS_HTML_ONLY 1.997
-score TO_NO_BRKTS_MSFT 2.497
-score TO_NO_BRKTS_NORDNS_HTML 0.961
-score TO_NO_BRKTS_PCNT 2.484
-score TVD_FROM_1 0.998
-score TVD_SPACE_ENCODED 1.409
-score TVD_SPACE_ENC_FM_MIME 1.997
-score TVD_SPACE_RATIO_MINFP 2.746
-score URI_DQ_UNSUB 1.989
-score URI_GOOGLE_PROXY 2.497
-score URI_ONLY_MSGID_MALF 0.426
-score URI_PHISH 2.211
+score RCVD_IN_MSPIKE_H2 -0.001
+score RCVD_IN_MSPIKE_L3 1.500
+score RCVD_IN_MSPIKE_L4 2.499
+score RCVD_IN_MSPIKE_L5 3.199
+score RCVD_IN_MSPIKE_ZBI 1.525
+score RISK_FREE 2.799
+score RP_MATCHES_RCVD -1.428
+score SERGIO_SUBJECT_VIAGRA01 2.864
+score SPOOFED_FREEM_REPTO 1.999
+score SPOOFED_FREEM_REPTO_CHN 1.999
+score STYLE_GIBBERISH 3.499
+score TAB_IN_FROM 0.466
+score THIS_AD 1.672
+score TO_EQ_FM_DOM_SPF_FAIL 1.807
+score TO_IN_SUBJ 0.100
+score TO_NO_BRKTS_FROM_MSSP 0.001
+score TO_NO_BRKTS_HTML_IMG 1.665
+score TO_NO_BRKTS_HTML_ONLY 1.999
+score TO_NO_BRKTS_MSFT 2.499
+score TO_NO_BRKTS_NORDNS_HTML 1.185
+score TO_NO_BRKTS_PCNT 2.444
+score TVD_FROM_1 0.999
+score TVD_SPACE_ENCODED 1.417
+score TVD_SPACE_ENC_FM_MIME 1.999
+score TVD_SPACE_RATIO_MINFP 2.749
+score URI_DQ_UNSUB 1.993
+score URI_GOOGLE_PROXY 2.399
+score URI_ONLY_MSGID_MALF 0.440
+score URI_PHISH 3.227
score URI_TRY_3LD 0.001
-score URI_TRY_USME 2.996
-score URI_WP_HACKED 2.494
-score URI_WP_HACKED_2 1.997
-score XM_PHPMAILER_FORGED 1.896
-score YOU_INHERIT 2.696
+score URI_TRY_USME 3.000
+score URI_WP_HACKED 2.495
+score URI_WP_HACKED_2 1.999
+score XM_PHPMAILER_FORGED 1.913
+score YOU_INHERIT 2.699
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1690563&r1=1690562&r2=1690563&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Mon Jul 13 02:39:24 2015
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 151911 30.410% (97.890% of non-spam corpus)
-# Correctly spam: 133109 26.646% (38.654% of spam corpus)
-# False positives: 3275 0.656% (2.110% of nonspam, 219007 weighted)
-# False negatives: 211254 42.289% (61.346% of spam, 643562 weighted)
-# Average score for spam: 6.8 nonspam: 0.7
-# Average for false-pos: 6.0 false-neg: 3.0
-# TOTAL: 499549 100.00%
+# Correctly non-spam: 151867 54.993% (97.589% of non-spam corpus)
+# Correctly spam: 73748 26.705% (61.182% of spam corpus)
+# False positives: 3752 1.359% (2.411% of nonspam, 86228 weighted)
+# False negatives: 46791 16.944% (38.818% of spam, 105996 weighted)
+# Average score for spam: 14.5 nonspam: 0.8
+# Average for false-pos: 5.9 false-neg: 2.3
+# TOTAL: 276158 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 19098 97.79%
-# Correctly spam: 16815 39.17%
-# False positives: 432 2.21%
-# False negatives: 26109 60.83%
-# TCR(l=50): 0.899704 SpamRecall: 39.174% SpamPrec: 97.495%
+# Correctly non-spam: 19118 97.66%
+# Correctly spam: 9322 61.56%
+# False positives: 459 2.34%
+# False negatives: 5821 38.44%
+# TCR(l=50): 0.526329 SpamRecall: 61.560% SpamPrec: 95.307%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 151523 97.64%
-# Correctly spam: 76476 22.21%
-# False positives: 3663 2.36%
-# False negatives: 267887 77.79%
-# TCR(l=50): 0.763492 SpamRecall: 22.208% SpamPrec: 95.429%
+# Correctly non-spam: 151926 97.63%
+# Correctly spam: 54857 45.51%
+# False positives: 3693 2.37%
+# False negatives: 65682 54.49%
+# TCR(l=50): 0.481517 SpamRecall: 45.510% SpamPrec: 93.693%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 19073 97.66%
-# Correctly spam: 9536 22.22%
-# False positives: 457 2.34%
-# False negatives: 33388 77.78%
-# TCR(l=50): 0.763256 SpamRecall: 22.216% SpamPrec: 95.427%
+# Correctly non-spam: 19125 97.69%
+# Correctly spam: 6935 45.80%
+# False positives: 452 2.31%
+# False negatives: 8208 54.20%
+# TCR(l=50): 0.491528 SpamRecall: 45.797% SpamPrec: 93.881%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1690563&r1=1690562&r2=1690563&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Mon Jul 13 02:39:24 2015
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 154908 41.260% (99.549% of non-spam corpus)
-# Correctly spam: 114449 30.484% (52.062% of spam corpus)
-# False positives: 702 0.187% (0.451% of nonspam, 57589 weighted)
-# False negatives: 105385 28.069% (47.938% of spam, 287289 weighted)
-# Average score for spam: 9.4 nonspam: -0.5
+# Correctly non-spam: 154804 41.294% (99.536% of non-spam corpus)
+# Correctly spam: 114413 30.520% (52.158% of spam corpus)
+# False positives: 721 0.192% (0.464% of nonspam, 59112 weighted)
+# False negatives: 104945 27.994% (47.842% of spam, 286175 weighted)
+# Average score for spam: 10.9 nonspam: -0.6
# Average for false-pos: 5.8 false-neg: 2.7
-# TOTAL: 375444 100.00%
+# TOTAL: 374883 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 19475 99.48%
-# Correctly spam: 14107 51.29%
-# False positives: 101 0.52%
-# False negatives: 13397 48.71%
-# TCR(l=50): 1.490974 SpamRecall: 51.291% SpamPrec: 99.289%
+# Correctly non-spam: 19473 99.52%
+# Correctly spam: 14146 51.53%
+# False positives: 93 0.48%
+# False negatives: 13307 48.47%
+# TCR(l=50): 1.528819 SpamRecall: 51.528% SpamPrec: 99.347%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 155104 99.67%
-# Correctly spam: 89754 40.83%
-# False positives: 506 0.33%
-# False negatives: 130080 59.17%
-# TCR(l=50): 1.414815 SpamRecall: 40.828% SpamPrec: 99.439%
+# Correctly non-spam: 155022 99.68%
+# Correctly spam: 89432 40.77%
+# False positives: 503 0.32%
+# False negatives: 129926 59.23%
+# TCR(l=50): 1.414519 SpamRecall: 40.770% SpamPrec: 99.441%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 19514 99.68%
-# Correctly spam: 11152 40.55%
-# False positives: 62 0.32%
-# False negatives: 16352 59.45%
-# TCR(l=50): 1.413942 SpamRecall: 40.547% SpamPrec: 99.447%
+# Correctly non-spam: 19502 99.67%
+# Correctly spam: 11124 40.52%
+# False positives: 64 0.33%
+# False negatives: 16329 59.48%
+# TCR(l=50): 1.405756 SpamRecall: 40.520% SpamPrec: 99.428%