Changing Scores

[Benjamin Adams <ba...@ambrosiasw.com>]

I have some email that are being marked as spam that I want to  
takeout.  I'm looking at changing the rule score:
Rules that are being hit:( From 50_scores.cf)
score MSGID_FROM_MTA_ID 1.103 0.927 1.183 1.393
score RCVD_HELO_IP_MISMATCH 3.200 3.200 3.700 4.000
score RCVD_NUMERIC_HELO 1.440 1.253 1.665 1.500


These three are changing it.
total Email score is: 5.743
I want it a safe number below: 5

I was going to just change the rating but the three numbers got me  
confused.
Can someone explain the 4 numbers for me?
Thanks

Re: Changing Scores

[Magnus Holmgren <ho...@lysator.liu.se>]

Wednesday 19 April 2006 16:40 Benjamin Adams wrote:
> Can someone explain the 4 numbers for me?
> Thanks

It's in the documentation:

> If four valid scores are listed, then the score that is used
> depends on how SpamAssassin is being used. The first score is used when
> both Bayes and network tests are disabled (score set 0). The second score
> is used when Bayes is disabled, but network tests are enabled (score set
> 1). The third score is used when Bayes is enabled and network tests are
> disabled (score set 2). The fourth score is used when Bayes is enabled and
> network tests are enabled (score set 3).

Note that even if you always run SA with Bayes+Network (for example), score 
set 1 is used when determining whether a message should be auto-learned. 
However, unless you perform the same type of statistical mass-checks as the 
SA team themselves do, there's probably little point in setting all four 
scores. (But I may be wrong.)

-- 
Magnus Holmgren
holmgren@lysator.liu.se

Re: Changing Scores

[jdow <jd...@earthlink.net>]

From: "Benjamin Adams" <ba...@ambrosiasw.com>

>I have some email that are being marked as spam that I want to  
> takeout.  I'm looking at changing the rule score:
> Rules that are being hit:( From 50_scores.cf)
> score MSGID_FROM_MTA_ID 1.103 0.927 1.183 1.393
> score RCVD_HELO_IP_MISMATCH 3.200 3.200 3.700 4.000
> score RCVD_NUMERIC_HELO 1.440 1.253 1.665 1.500
> 
> 
> These three are changing it.
> total Email score is: 5.743
> I want it a safe number below: 5
> 
> I was going to just change the rating but the three numbers got me  
> confused.
> Can someone explain the 4 numbers for me?

Changing any one of those rules will likely result in a large increase
in your percentage of untagged spam. All three suggest that your
correspondent has an exceptionally poorly setup mail server. If you
want to receive spam er mail from that correspondent then you should
consider a whitelist_from_rcvd rule, instead.

Regarding your question run "man Mail::SpamAssassin::Conf" and go to the
second item under "USER PREFERENCES"->"SCORING OPTIONS".

{^_^}