You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Bowie Bailey <Bo...@BUC.com> on 2017/05/02 15:46:13 UTC
Mailspike scores
I was checking to see what the scores for mailspike were on my server
and I noticed that there are two sets of scores.
50_scores.cf: score RCVD_IN_MSPIKE_ZBI 2.7
50_scores.cf: score RCVD_IN_MSPIKE_L5 2.5
50_scores.cf: score RCVD_IN_MSPIKE_L4 1.7
50_scores.cf: score RCVD_IN_MSPIKE_L3 0.9
50_scores.cf: score RCVD_IN_MSPIKE_H3 -0.01
50_scores.cf: score RCVD_IN_MSPIKE_H4 -0.01
50_scores.cf: score RCVD_IN_MSPIKE_H5 -1.0
50_scores.cf: score RCVD_IN_MSPIKE_BL 0.01
50_scores.cf: score RCVD_IN_MSPIKE_WL -0.01
72_scores.cf:score RCVD_IN_MSPIKE_BL 0.001 0.010
0.001 0.010
72_scores.cf:score RCVD_IN_MSPIKE_H2 0.001 -2.800
0.001 -2.800
72_scores.cf:score RCVD_IN_MSPIKE_H3 0.001 -0.010
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_H4 0.001 -0.010
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_H5 0.001 -1.000
0.001 -1.000
72_scores.cf:score RCVD_IN_MSPIKE_L2 0.001 0.001
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L3 0.001 0.001
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L4 0.001 0.001
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_L5 0.001 0.001
0.001 0.001
72_scores.cf:score RCVD_IN_MSPIKE_WL 0.001 -0.010
0.001 -0.010
72_scores.cf:score RCVD_IN_MSPIKE_ZBI 0.001 0.001
0.001 0.001
Is this expected?
--
Bowie
Re: Mailspike scores
Posted by John Hardin <jh...@impsec.org>.
On Tue, 2 May 2017, RW wrote:
> On Tue, 2 May 2017 09:20:49 -0700 (PDT)
> John Hardin wrote:
>
>> On Tue, 2 May 2017, Bowie Bailey wrote:
>>
>>> On 5/2/2017 11:53 AM, John Hardin wrote:
>>>> On Tue, 2 May 2017, Bowie Bailey wrote:
>>>>
>>>>> I was checking to see what the scores for mailspike were on my
>>>>> server and I noticed that there are two sets of scores.
>>>>>
>>>>> Is this expected?
>>>>
>>>> 50_scores is handcoded default scores, 72_scores is generated from
>>>> masscheck
>>>
>>> That's what I thought, but what's the point of having handcoded
>>> scores that are overridden by the generated scores?
>>
>> Reasonable default values are always a good idea.
>
> It looks like 72_scores only holds scores for rules from 72_active.cf
> plus scores for MSPIKE rules and SURBL_BLOCKED (what's that doing
> there?).
>
> If 72_scores holds generated scores why are so many of then 1.000?
Limits?
> You say that 50_scores is "handcoded default scores", but at the top
> of the file there's a big block of scores that are claimed to have been
> set by perceptron, which I understand fell-off a long time ago. They
> certainly look autogenerated.
Check the revision history in SVN.
http://svn.apache.org/viewvc/spamassassin/trunk/rules/50_scores.cf
> On the face of it it looks a lot of the rules I assumed were autoscored
> are using scores generated years ago.
Potentially. I have not done a detailed review.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Maxim IV: Close air support covereth a multitude of sins.
-----------------------------------------------------------------------
6 days until the 72nd anniversary of VE day
Re: Mailspike scores
Posted by RW <rw...@googlemail.com>.
On Tue, 2 May 2017 09:20:49 -0700 (PDT)
John Hardin wrote:
> On Tue, 2 May 2017, Bowie Bailey wrote:
>
> > On 5/2/2017 11:53 AM, John Hardin wrote:
> >> On Tue, 2 May 2017, Bowie Bailey wrote:
> >>
> >> > I was checking to see what the scores for mailspike were on my
> >> > server and I noticed that there are two sets of scores.
> >> >
> >> > Is this expected?
> >>
> >> 50_scores is handcoded default scores, 72_scores is generated from
> >> masscheck
> >
> > That's what I thought, but what's the point of having handcoded
> > scores that are overridden by the generated scores?
>
> Reasonable default values are always a good idea.
It looks like 72_scores only holds scores for rules from 72_active.cf
plus scores for MSPIKE rules and SURBL_BLOCKED (what's that doing
there?).
If 72_scores holds generated scores why are so many of then 1.000?
You say that 50_scores is "handcoded default scores", but at the top
of the file there's a big block of scores that are claimed to have been
set by perceptron, which I understand fell-off a long time ago. They
certainly look autogenerated.
On the face of it it looks a lot of the rules I assumed were autoscored
are using scores generated years ago.
Re: Mailspike scores
Posted by John Hardin <jh...@impsec.org>.
On Tue, 2 May 2017, Bowie Bailey wrote:
> On 5/2/2017 11:53 AM, John Hardin wrote:
>> On Tue, 2 May 2017, Bowie Bailey wrote:
>>
>> > I was checking to see what the scores for mailspike were on my server
>> > and I noticed that there are two sets of scores.
>> >
>> > Is this expected?
>>
>> 50_scores is handcoded default scores, 72_scores is generated from
>> masscheck
>
> That's what I thought, but what's the point of having handcoded scores that
> are overridden by the generated scores?
Reasonable default values are always a good idea.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
USMC Rules of Gunfighting #4: If your shooting stance is good,
you're probably not moving fast enough nor using cover correctly.
-----------------------------------------------------------------------
6 days until the 72nd anniversary of VE day
Re: Mailspike scores
Posted by Bowie Bailey <Bo...@BUC.com>.
On 5/2/2017 11:53 AM, John Hardin wrote:
> On Tue, 2 May 2017, Bowie Bailey wrote:
>
>> I was checking to see what the scores for mailspike were on my server
>> and I noticed that there are two sets of scores.
>>
>> 50_scores.cf: score RCVD_IN_MSPIKE_ZBI 2.7
>> 50_scores.cf: score RCVD_IN_MSPIKE_L5 2.5
>> 50_scores.cf: score RCVD_IN_MSPIKE_L4 1.7
>> 50_scores.cf: score RCVD_IN_MSPIKE_L3 0.9
>> 50_scores.cf: score RCVD_IN_MSPIKE_H3 -0.01
>> 50_scores.cf: score RCVD_IN_MSPIKE_H4 -0.01
>> 50_scores.cf: score RCVD_IN_MSPIKE_H5 -1.0
>> 50_scores.cf: score RCVD_IN_MSPIKE_BL 0.01
>> 50_scores.cf: score RCVD_IN_MSPIKE_WL -0.01
>> 72_scores.cf:score RCVD_IN_MSPIKE_BL 0.001 0.010
>> 0.001 0.010
>> 72_scores.cf:score RCVD_IN_MSPIKE_H2 0.001 -2.800
>> 0.001 -2.800
>> 72_scores.cf:score RCVD_IN_MSPIKE_H3 0.001 -0.010
>> 0.001 -0.010
>> 72_scores.cf:score RCVD_IN_MSPIKE_H4 0.001 -0.010
>> 0.001 -0.010
>> 72_scores.cf:score RCVD_IN_MSPIKE_H5 0.001 -1.000
>> 0.001 -1.000
>> 72_scores.cf:score RCVD_IN_MSPIKE_L2 0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_MSPIKE_L3 0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_MSPIKE_L4 0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_MSPIKE_L5 0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_MSPIKE_WL 0.001 -0.010
>> 0.001 -0.010
>> 72_scores.cf:score RCVD_IN_MSPIKE_ZBI 0.001 0.001
>> 0.001 -1.001
>>
>> Is this expected?
>
> 50_scores is handcoded default scores, 72_scores is generated from
> masscheck
That's what I thought, but what's the point of having handcoded scores
that are overridden by the generated scores?
--
Bowie
Re: Mailspike scores
Posted by John Hardin <jh...@impsec.org>.
On Tue, 2 May 2017, Bowie Bailey wrote:
> I was checking to see what the scores for mailspike were on my server and I
> noticed that there are two sets of scores.
>
> 50_scores.cf: score RCVD_IN_MSPIKE_ZBI 2.7
> 50_scores.cf: score RCVD_IN_MSPIKE_L5 2.5
> 50_scores.cf: score RCVD_IN_MSPIKE_L4 1.7
> 50_scores.cf: score RCVD_IN_MSPIKE_L3 0.9
> 50_scores.cf: score RCVD_IN_MSPIKE_H3 -0.01
> 50_scores.cf: score RCVD_IN_MSPIKE_H4 -0.01
> 50_scores.cf: score RCVD_IN_MSPIKE_H5 -1.0
> 50_scores.cf: score RCVD_IN_MSPIKE_BL 0.01
> 50_scores.cf: score RCVD_IN_MSPIKE_WL -0.01
> 72_scores.cf:score RCVD_IN_MSPIKE_BL 0.001 0.010 0.001 0.010
> 72_scores.cf:score RCVD_IN_MSPIKE_H2 0.001 -2.800 0.001 -2.800
> 72_scores.cf:score RCVD_IN_MSPIKE_H3 0.001 -0.010 0.001 -0.010
> 72_scores.cf:score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 -0.010
> 72_scores.cf:score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 -1.000
> 72_scores.cf:score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
> 72_scores.cf:score RCVD_IN_MSPIKE_L3 0.001 0.001 0.001 0.001
> 72_scores.cf:score RCVD_IN_MSPIKE_L4 0.001 0.001 0.001 0.001
> 72_scores.cf:score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
> 72_scores.cf:score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 -0.010
> 72_scores.cf:score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 -1.001
>
> Is this expected?
50_scores is handcoded default scores, 72_scores is generated from
masscheck.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
How do you argue with people to whom math is an opinion? -- Unknown
-----------------------------------------------------------------------
6 days until the 72nd anniversary of VE day