You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2013/11/14 03:48:57 UTC
svn commit: r1541789 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Thu Nov 14 02:48:57 2013
New Revision: 1541789
URL: http://svn.apache.org/r1541789
Log:
updated scores for revision 1541424 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1541789&r1=1541788&r2=1541789&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Thu Nov 14 02:48:57 2013
@@ -1,116 +1,87 @@
-score ADVANCE_FEE_2_NEW_FORM 0.486 0.610 0.486 0.610
-score ADVANCE_FEE_2_NEW_FRM_MNY 2.213 1.566 2.213 1.566
-score ADVANCE_FEE_2_NEW_MONEY 2.650 3.856 2.650 3.856
-score ADVANCE_FEE_3_NEW 1.997 1.427 1.997 1.427
-score ADVANCE_FEE_3_NEW_FORM 1.520 1.677 1.520 1.677
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.370 0.950 0.370 0.950
-score ADVANCE_FEE_3_NEW_MONEY 0.177 0.001 0.177 0.001
-score ADVANCE_FEE_4_NEW 0.001 1.919 0.001 1.919
+score ADVANCE_FEE_2_NEW_FORM 1.795 0.603 1.795 0.603
+score ADVANCE_FEE_2_NEW_FRM_MNY 1.202 0.750 1.202 0.750
+score ADVANCE_FEE_2_NEW_MONEY 1.995 3.859 1.995 3.859
+score ADVANCE_FEE_3_NEW 0.606 2.249 0.606 2.249
+score ADVANCE_FEE_3_NEW_FORM 2.234 2.291 2.234 2.291
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.073 3.334 0.073 3.334
+score ADVANCE_FEE_3_NEW_MONEY 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_4_NEW 2.440 2.033 2.440 2.033
score ADVANCE_FEE_4_NEW_FORM 0.001 0.001 0.001 0.001
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.930 0.001 2.930 0.001
-score ADVANCE_FEE_4_NEW_MONEY 2.354 0.001 2.354 0.001
-score ADVANCE_FEE_5_NEW 0.001 0.001 0.001 0.001
-score ADVANCE_FEE_5_NEW_FORM 0.001 0.125 0.001 0.125
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.208 3.132 2.208 3.132
-score ADVANCE_FEE_5_NEW_MONEY 0.773 0.001 0.773 0.001
-score AXB_3LITTLE_PIGS 0.517 0.612 0.517 0.612
-score AXB_BODYMAIL_SBL112884 0.001 1.645 0.001 1.645
-score AXB_ONMS_LEAKS 3.099 2.999 3.099 2.999
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.439 1.800 1.439 1.800
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 3.380 0.135 3.380 0.135
-score AXB_XMAILER_MIMEOLE_OL_E9F46 2.599 2.599 2.599 2.599
-score AXB_XMA_BASP 2.767 3.468 2.767 3.468
-score AXB_XM_FORGED_OL2600 2.399 0.997 2.399 0.997
-score BIGNUM_EMAILS 0.001 0.041 0.001 0.041
-score BILLION_OVERLAP -0.870 -0.188 -0.870 -0.188
-score BITLY_URI 1.000 2.249 1.000 2.249
-score BODY_EMPTY 1.600 2.999 1.600 2.999
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499 1.499 1.499 1.499
-score CK_HELO_GENERIC 0.250 0.250 0.250 0.250
-score CN_B2B_SPAMMER 3.599 3.388 3.599 3.388
-score COMMENT_GIBBERISH 0.999 0.999 0.999 0.999
-score COMPENSATION 1.499 1.499 1.499 1.499
-score DATE_IN_FUTURE_96_Q 2.699 2.700 2.699 2.700
-score DATE_IN_FUTURE_Q_PLUS 3.099 2.999 3.099 2.999
-score DEAR_BENEFICIARY 3.099 2.999 3.099 2.999
-score DEAR_EMAIL_USER 0.001 2.399 0.001 2.399
-score DSN_NO_MIMEVERSION 1.999 1.999 1.999 1.999
-score EMAIL_URI_PHISH 3.999 3.999 3.999 3.999
-score FBI_MONEY 1.000 0.655 1.000 0.655
-score FBI_SPOOF 0.502 1.756 0.502 1.756
-score FH_FROM_START_YOU 0.001 1.976 0.001 1.976
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_5_NEW 0.774 0.001 0.774 0.001
+score ADVANCE_FEE_5_NEW_FORM 0.144 2.512 0.144 2.512
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.559 2.999 1.559 2.999
+score ADVANCE_FEE_5_NEW_MONEY 0.001 0.001 0.001 0.001
+score AXB_3LITTLE_PIGS 1.546 2.407 1.546 2.407
+score AXB_ONMS_LEAKS 3.096 2.999 3.096 2.999
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.400 1.901 1.400 1.901
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.992 1.747 1.992 1.747
+score AXB_XMAILER_MIMEOLE_OL_E9F46 2.596 2.599 2.596 2.599
+score AXB_XMA_BASP 3.895 2.964 3.895 2.964
+score BILLION_OVERLAP -0.660 -0.999 -0.660 -0.999
+score BODY_EMPTY 2.098 3.000 2.098 3.000
+score CK_HELO_DYNAMIC_SPLIT_IP 1.498 1.499 1.498 1.499
+score CN_B2B_SPAMMER 3.595 3.599 3.595 3.599
+score COMMENT_GIBBERISH 0.998 0.999 0.998 0.999
+score COMPENSATION 1.498 1.499 1.498 1.499
+score DATE_IN_FUTURE_96_Q 2.696 2.699 2.696 2.699
+score DATE_IN_FUTURE_Q_PLUS 3.096 2.999 3.096 2.999
+score DEAR_BENEFICIARY 3.096 3.100 3.096 3.100
+score DSN_NO_MIMEVERSION 1.997 1.999 1.997 1.999
+score EMAIL_URI_PHISH 3.995 3.999 3.995 3.999
score FILL_THIS_FORM 0.001 0.001 0.001 0.001
-score FORM_FRAUD_3 2.192 0.861 2.192 0.861
+score FORM_FRAUD_3 1.572 1.302 1.572 1.302
score FORM_FRAUD_5 0.001 0.001 0.001 0.001
-score FROM_MISSPACED 0.001 1.961 0.001 1.961
-score FROM_MISSP_DYNIP 1.772 2.779 1.772 2.779
-score FROM_MISSP_EH_MATCH 1.511 1.822 1.511 1.822
-score FROM_MISSP_FREEMAIL 4.299 4.399 4.299 4.399
-score FROM_MISSP_MSFT 4.299 3.762 4.299 3.762
-score FROM_MISSP_PHISH 1.835 4.294 1.835 4.294
-score FROM_MISSP_REPLYTO 0.354 2.504 0.354 2.504
+score FROM_MISSPACED 1.453 1.064 1.453 1.064
+score FROM_MISSP_DYNIP 2.345 0.187 2.345 0.187
+score FROM_MISSP_EH_MATCH 1.999 1.545 1.999 1.545
+score FROM_MISSP_FREEMAIL 4.295 4.399 4.295 4.399
+score FROM_MISSP_MSFT 4.296 4.057 4.296 4.057
+score FROM_MISSP_REPLYTO 4.296 3.891 4.296 3.891
score FROM_MISSP_SPF_FAIL 0.001 0.001 0.001 0.001
-score FROM_MISSP_TO_UNDISC 3.862 2.169 3.862 2.169
-score FROM_MISSP_USER 3.999 1.882 3.999 1.882
-score FROM_WSP_LEAD 2.399 2.499 2.399 2.499
-score FSL_CTYPE_WIN1251 4.299 2.445 4.299 2.445
-score FSL_HELO_BARE_IP_2 2.000 1.999 2.000 1.999
-score FSL_HELO_FAKE 3.099 3.199 3.099 3.199
-score FSL_MISSP_REPLYTO 1.839 3.018 1.839 3.018
-score FSL_MY_NAME_IS 2.349 2.735 2.349 2.735
-score FSL_NEW_HELO_USER 0.850 0.299 0.850 0.299
+score FROM_MISSP_TO_UNDISC 3.698 3.578 3.698 3.578
+score FROM_MISSP_USER 1.807 3.078 1.807 3.078
+score FSL_CTYPE_WIN1251 4.295 2.997 4.295 2.997
+score FSL_HELO_BARE_IP_2 1.998 1.999 1.998 1.999
+score FSL_HELO_FAKE 3.096 3.099 3.096 3.099
+score FSL_MISSP_REPLYTO 1.841 2.763 1.841 2.763
+score FSL_NEW_HELO_USER 0.844 2.012 0.844 2.012
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
-score HK_LOTTO_SUBJECT 0.001 0.999 0.001 0.999
-score HK_NAME_FM_MR_MRS 1.499 1.499 1.499 1.499
-score HK_NAME_MR_MRS 0.999 0.308 0.999 0.308
-score HK_RANDOM_FROM 1.000 0.999 1.000 0.999
-score HK_RANDOM_REPLYTO 0.001 0.999 0.001 0.999
-score HK_SCAM_N1 1.500 1.906 1.500 1.906
-score HK_SCAM_N2 3.314 2.941 3.314 2.941
-score HK_SCAM_N4 0.688 2.700 0.688 2.700
-score HK_SPAMMY_FILENAME 0.001 2.399 0.001 2.399
+score HK_NAME_FM_MR_MRS 1.498 1.499 1.498 1.499
+score HK_SCAM_N1 1.499 1.908 1.499 1.908
+score HK_SCAM_N2 3.581 2.577 3.581 2.577
score LOTS_OF_MONEY 0.001 0.001 0.001 0.001
-score LOTTO_AGENT 0.001 0.001 0.001 0.001
-score LOTTO_DEPT 0.001 0.001 0.001 0.001
-score MAILER_EQ_ORG 0.001 0.671 0.001 0.671
-score MALFORMED_FREEMAIL 2.899 1.745 2.899 1.745
-score MIME_MALF 1.000 1.293 1.000 1.293
-score MONEY_ATM_CARD 2.899 0.001 2.899 0.001
-score MONEY_FORM 0.001 0.279 0.001 0.279
-score MONEY_FORM_SHORT 3.478 2.375 3.478 2.375
-score MONEY_FRAUD_3 3.289 2.902 3.289 2.902
-score MONEY_FRAUD_5 1.661 2.497 1.661 2.497
-score MONEY_FROM_41 1.999 1.999 1.999 1.999
-score MONEY_FROM_MISSP 1.730 0.914 1.730 0.914
-score NSL_RCVD_FROM_USER 1.856 2.355 1.856 2.355
-score NSL_RCVD_HELO_USER 3.031 1.727 3.031 1.727
-score OBFU_HTML_ATTACH 2.699 0.001 2.699 0.001
-score OBFU_TEXT_ATTACH 2.597 2.699 2.597 2.699
-score PHP_NOVER_MUA 3.499 3.499 3.499 3.499
+score LOTTO_AGENT 0.391 0.001 0.391 0.001
+score MONEY_ATM_CARD 2.996 1.445 2.996 1.445
+score MONEY_FORM 0.001 0.164 0.001 0.164
+score MONEY_FORM_SHORT 3.480 2.099 3.480 2.099
+score MONEY_FRAUD_3 3.999 3.677 3.999 3.677
+score MONEY_FRAUD_5 1.543 2.629 1.543 2.629
+score MONEY_FROM_41 1.997 1.999 1.997 1.999
+score MONEY_FROM_MISSP 1.589 1.210 1.589 1.210
+score NSL_RCVD_FROM_USER 1.958 0.639 1.958 0.639
+score NSL_RCVD_HELO_USER 2.039 0.910 2.039 0.910
+score OBFU_TEXT_ATTACH 2.597 2.700 2.597 2.700
+score PHP_NOVER_MUA 3.496 3.499 3.496 3.499
score RCVD_IN_MSPIKE_BL 0.001 0.010 0.001 0.010
-score RCVD_IN_MSPIKE_H2 0.001 -0.109 0.001 -0.109
+score RCVD_IN_MSPIKE_H2 0.001 -0.110 0.001 -0.110
score RCVD_IN_MSPIKE_H3 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 -1.000
score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L3 0.001 1.973 0.001 1.973
+score RCVD_IN_MSPIKE_L3 0.001 1.884 0.001 1.884
score RCVD_IN_MSPIKE_L4 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L5 0.001 1.127 0.001 1.127
+score RCVD_IN_MSPIKE_L5 0.001 3.199 0.001 3.199
score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
-score RISK_FREE 2.599 0.680 2.599 0.680
-score RP_MATCHES_RCVD -1.502 -0.001 -1.502 -0.001
-score SHARE_50_50 0.001 1.210 0.001 1.210
-score STYLE_GIBBERISH 1.700 2.726 1.700 2.726
+score RISK_FREE 2.593 0.068 2.593 0.068
+score RP_MATCHES_RCVD -1.499 -0.001 -1.499 -0.001
score TAB_IN_FROM 0.001 0.001 0.001 0.001
-score TO_EQ_FM_DOM_SPF_FAIL 0.001 1.122 0.001 1.122
-score TO_EQ_FM_SPF_FAIL 0.001 1.941 0.001 1.941
-score TO_NO_BRKTS_FROM_MSSP 2.248 2.499 2.248 2.499
-score TO_NO_BRKTS_MSFT 3.500 3.499 3.500 3.499
-score TO_NO_BRKTS_PCNT 0.001 0.935 0.001 0.935
-score TVD_FROM_1 1.000 0.999 1.000 0.999
-score TVD_PDF_FINGER01 3.299 3.299 3.299 3.299
-score TVD_PH_BODY_META 1.400 2.699 1.400 2.699
-score URIBL_MW_SURBL 0.001 1.724 0.001 1.724
-score XM_PHPMAILER_FORGED 0.001 2.699 0.001 2.699
+score TO_EQ_FM_DOM_SPF_FAIL 0.001 1.134 0.001 1.134
+score TO_EQ_FM_SPF_FAIL 0.001 1.953 0.001 1.953
+score TO_NO_BRKTS_FROM_MSSP 2.497 2.499 2.497 2.499
+score TO_NO_BRKTS_MSFT 3.496 3.499 3.496 3.499
+score TVD_FROM_1 0.998 1.000 0.998 1.000
+score URIBL_MW_SURBL 0.001 2.576 0.001 2.576
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1541789&r1=1541788&r2=1541789&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Thu Nov 14 02:48:57 2013
@@ -1,100 +1,78 @@
-# Using score set 0 logs for revision 1540972 from:
-# ham-axb-8mile.log ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-sa-users.log ham-bb-guenther_fraud.log ham-bb-jhardin.log ham-bb-jhardin_fraud.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-grenier.log ham-jarif.log ham-kpg-core.log ham-mmiroslaw-ham.log ham-mmiroslaw-spam.log ham-zmi.log spam-axb-8mile.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-sa-users.log spam-bb-guenther_fraud.log spam-bb-jhardin.log spam-bb-jhardin_fraud.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-grenier.log spam-jarif.log spam-kpg-core.log spam-mmiroslaw-ham.log spam-mmiroslaw-spam.log spam-zmi.log
+# Using score set 0 logs for revision 1541424 from:
+# ham-axb-8mile.log ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-sa-users.log ham-bb-guenther_fraud.log ham-bb-jhardin.log ham-bb-jhardin_fraud.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-grenier.log ham-jarif.log ham-kpg-core.log ham-mas-cps.log ham-mas-mas.log ham-mmiroslaw-ham.log ham-mmiroslaw-spam.log ham-zmi.log spam-axb-8mile.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-sa-users.log spam-bb-guenther_fraud.log spam-bb-jhardin.log spam-bb-jhardin_fraud.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-grenier.log spam-jarif.log spam-kpg-core.log spam-mas-cps.log spam-mas-mas.log spam-mmiroslaw-ham.log spam-mmiroslaw-spam.log spam-zmi.log
-score ADVANCE_FEE_2_NEW_FORM 0.486
-score ADVANCE_FEE_2_NEW_FRM_MNY 2.213
-score ADVANCE_FEE_2_NEW_MONEY 2.650
-score ADVANCE_FEE_3_NEW 1.997
-score ADVANCE_FEE_3_NEW_FORM 1.520
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.370
-score ADVANCE_FEE_3_NEW_MONEY 0.177
-score ADVANCE_FEE_4_NEW 0.001
-score ADVANCE_FEE_4_NEW_FORM 0.001 # force non-zero
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.930
-score ADVANCE_FEE_4_NEW_MONEY 2.354
-score ADVANCE_FEE_5_NEW 0.001
-score ADVANCE_FEE_5_NEW_FORM 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.208
-score ADVANCE_FEE_5_NEW_MONEY 0.773
-score AXB_3LITTLE_PIGS 0.517
-score AXB_ONMS_LEAKS 3.099
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.439
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 3.380
-score AXB_XMAILER_MIMEOLE_OL_E9F46 2.599
-score AXB_XMA_BASP 2.767
-score AXB_XM_FORGED_OL2600 2.399
-score BIGNUM_EMAILS 0.001
-score BILLION_OVERLAP -0.870
-score BODY_EMPTY 1.600
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.250
-score CN_B2B_SPAMMER 3.599
-score COMMENT_GIBBERISH 0.999
-score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 2.699
-score DATE_IN_FUTURE_Q_PLUS 3.099
-score DEAR_BENEFICIARY 3.099
-score DSN_NO_MIMEVERSION 1.999
-score EMAIL_URI_PHISH 3.999
-score FBI_SPOOF 0.502
+score ADVANCE_FEE_2_NEW_FORM 1.795
+score ADVANCE_FEE_2_NEW_FRM_MNY 1.202
+score ADVANCE_FEE_2_NEW_MONEY 1.995
+score ADVANCE_FEE_3_NEW 0.606
+score ADVANCE_FEE_3_NEW_FORM 2.234
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.073
+score ADVANCE_FEE_3_NEW_MONEY 0.001
+score ADVANCE_FEE_4_NEW 2.440
+score ADVANCE_FEE_4_NEW_FORM 0.001
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.001
+score ADVANCE_FEE_5_NEW 0.774
+score ADVANCE_FEE_5_NEW_FORM 0.144
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.559
+score ADVANCE_FEE_5_NEW_MONEY 0.001
+score AXB_3LITTLE_PIGS 1.546
+score AXB_ONMS_LEAKS 3.096
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.400
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.992
+score AXB_XMAILER_MIMEOLE_OL_E9F46 2.596
+score AXB_XMA_BASP 3.895
+score BILLION_OVERLAP -0.660
+score BODY_EMPTY 2.098
+score CK_HELO_DYNAMIC_SPLIT_IP 1.498
+score CN_B2B_SPAMMER 3.595
+score COMMENT_GIBBERISH 0.998
+score COMPENSATION 1.498
+score DATE_IN_FUTURE_96_Q 2.696
+score DATE_IN_FUTURE_Q_PLUS 3.096
+score DEAR_BENEFICIARY 3.096
+score DSN_NO_MIMEVERSION 1.997
+score EMAIL_URI_PHISH 3.995
score FILL_THIS_FORM 0.001
-score FORM_FRAUD_3 2.192
+score FORM_FRAUD_3 1.572
score FORM_FRAUD_5 0.001
-score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 1.772
-score FROM_MISSP_EH_MATCH 1.511
-score FROM_MISSP_FREEMAIL 4.299
-score FROM_MISSP_MSFT 4.299
-score FROM_MISSP_PHISH 1.835
-score FROM_MISSP_REPLYTO 0.354
-score FROM_MISSP_TO_UNDISC 3.862
-score FROM_MISSP_USER 3.999
-score FROM_WSP_LEAD 2.399
-score FSL_CTYPE_WIN1251 4.299
-score FSL_HELO_BARE_IP_2 2.000
-score FSL_HELO_FAKE 3.099
-score FSL_MISSP_REPLYTO 1.839
-score FSL_MY_NAME_IS 2.349
-score FSL_NEW_HELO_USER 0.850
-score HK_LOTTO_SUBJECT 0.001
-score HK_NAME_FM_MR_MRS 1.499
-score HK_NAME_MR_MRS 0.999
-score HK_RANDOM_FROM 1.000
-score HK_RANDOM_REPLYTO 0.001
-score HK_SCAM_N1 1.500
-score HK_SCAM_N2 3.314
-score HK_SCAM_N4 0.688
+score FROM_MISSPACED 1.453
+score FROM_MISSP_DYNIP 2.345
+score FROM_MISSP_EH_MATCH 1.999
+score FROM_MISSP_FREEMAIL 4.295
+score FROM_MISSP_MSFT 4.296
+score FROM_MISSP_REPLYTO 4.296
+score FROM_MISSP_TO_UNDISC 3.698
+score FROM_MISSP_USER 1.807
+score FSL_CTYPE_WIN1251 4.295
+score FSL_HELO_BARE_IP_2 1.998
+score FSL_HELO_FAKE 3.096
+score FSL_MISSP_REPLYTO 1.841
+score FSL_NEW_HELO_USER 0.844
+score HK_NAME_FM_MR_MRS 1.498
+score HK_SCAM_N1 1.499
+score HK_SCAM_N2 3.581
score LOTS_OF_MONEY 0.001 # force non-zero
-score LOTTO_AGENT 0.001
-score LOTTO_DEPT 0.001
-score MALFORMED_FREEMAIL 2.899
-score MONEY_ATM_CARD 2.899
+score LOTTO_AGENT 0.391
+score MONEY_ATM_CARD 2.996
score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 3.478
-score MONEY_FRAUD_3 3.289
-score MONEY_FRAUD_5 1.661
-score MONEY_FROM_41 1.999
-score MONEY_FROM_MISSP 1.730
-score NSL_RCVD_FROM_USER 1.856
-score NSL_RCVD_HELO_USER 3.031
-score OBFU_HTML_ATTACH 2.699
+score MONEY_FORM_SHORT 3.480
+score MONEY_FRAUD_3 3.999
+score MONEY_FRAUD_5 1.543
+score MONEY_FROM_41 1.997
+score MONEY_FROM_MISSP 1.589
+score NSL_RCVD_FROM_USER 1.958
+score NSL_RCVD_HELO_USER 2.039
score OBFU_TEXT_ATTACH 2.597
-score PHP_NOVER_MUA 3.499
-score RISK_FREE 2.599
-score RP_MATCHES_RCVD -1.502
-score STYLE_GIBBERISH 1.700
+score PHP_NOVER_MUA 3.496
+score RISK_FREE 2.593
+score RP_MATCHES_RCVD -1.499
score TAB_IN_FROM 0.001
-score TO_NO_BRKTS_FROM_MSSP 2.248
-score TO_NO_BRKTS_MSFT 3.500
-score TO_NO_BRKTS_PCNT 0.001
-score TVD_FROM_1 1.000
-score TVD_PDF_FINGER01 3.299
-score TVD_PH_BODY_META 1.400
-score BITLY_URI 1.000
-score FBI_MONEY 1.000
+score TO_NO_BRKTS_FROM_MSSP 2.497
+score TO_NO_BRKTS_MSFT 3.496
+score TVD_FROM_1 0.998
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
-score MIME_MALF 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
score RCVD_IN_MSPIKE_BL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1541789&r1=1541788&r2=1541789&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Thu Nov 14 02:48:57 2013
@@ -1,113 +1,85 @@
# Using score set 1 logs for revision 1540279 from:
# ham-net-axb-8mile.log ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-bb-guenther_fraud.log ham-net-bb-jhardin.log ham-net-bb-jhardin_fraud.log ham-net-bb-jm.log ham-net-bb-kmcgrail.log ham-net-bb-zmi.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bpoliakoff.log ham-net-grenier.log ham-net-jarif.log ham-net-kpg-core.log ham-net-mas-cps.log ham-net-mas-mas.log ham-net-mmiroslaw-ham.log ham-net-mmiroslaw-spam.log ham-net-zmi.log spam-net-axb-8mile.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin.log spam-net-bb-jhardin_fraud.log spam-net-bb-jm.log spam-net-bb-kmcgrail.log spam-net-bb-zmi.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bpoliakoff.log spam-net-grenier.log spam-net-jarif.log spam-net-kpg-core.log spam-net-mas-cps.log spam-net-mas-mas.log spam-net-mmiroslaw-ham.log spam-net-mmiroslaw-spam.log spam-net-zmi.log
-score ADVANCE_FEE_2_NEW_FORM 0.610
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.566
-score ADVANCE_FEE_2_NEW_MONEY 3.856
-score ADVANCE_FEE_3_NEW 1.427
-score ADVANCE_FEE_3_NEW_FORM 1.677
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.950
+score ADVANCE_FEE_2_NEW_FORM 0.603
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.750
+score ADVANCE_FEE_2_NEW_MONEY 3.859
+score ADVANCE_FEE_3_NEW 2.249
+score ADVANCE_FEE_3_NEW_FORM 2.291
+score ADVANCE_FEE_3_NEW_FRM_MNY 3.334
score ADVANCE_FEE_3_NEW_MONEY 0.001
-score ADVANCE_FEE_4_NEW 1.919
+score ADVANCE_FEE_4_NEW 2.033
score ADVANCE_FEE_4_NEW_FORM 0.001
score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW 0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_FORM 0.125
-score ADVANCE_FEE_5_NEW_FRM_MNY 3.132
-score ADVANCE_FEE_5_NEW_MONEY 0.001
-score AXB_3LITTLE_PIGS 0.612
-score AXB_BODYMAIL_SBL112884 1.645
+score ADVANCE_FEE_5_NEW 0.001
+score ADVANCE_FEE_5_NEW_FORM 2.512
+score ADVANCE_FEE_5_NEW_FRM_MNY 2.999
+score ADVANCE_FEE_5_NEW_MONEY 0.001 # force non-zero
+score AXB_3LITTLE_PIGS 2.407
score AXB_ONMS_LEAKS 2.999
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.800
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.135
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.901
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.747
score AXB_XMAILER_MIMEOLE_OL_E9F46 2.599
-score AXB_XMA_BASP 3.468
-score AXB_XM_FORGED_OL2600 0.997
-score BIGNUM_EMAILS 0.041
-score BILLION_OVERLAP -0.188
-score BITLY_URI 2.249
-score BODY_EMPTY 2.999
+score AXB_XMA_BASP 2.964
+score BILLION_OVERLAP -0.999
+score BODY_EMPTY 3.000
score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.250
-score CN_B2B_SPAMMER 3.388
+score CN_B2B_SPAMMER 3.599
score COMMENT_GIBBERISH 0.999
score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 2.700
+score DATE_IN_FUTURE_96_Q 2.699
score DATE_IN_FUTURE_Q_PLUS 2.999
-score DEAR_BENEFICIARY 2.999
-score DEAR_EMAIL_USER 2.399
+score DEAR_BENEFICIARY 3.100
score DSN_NO_MIMEVERSION 1.999
score EMAIL_URI_PHISH 3.999
-score FBI_MONEY 0.655
-score FBI_SPOOF 1.756
-score FH_FROM_START_YOU 1.976
score FILL_THIS_FORM 0.001
-score FORM_FRAUD_3 0.861
+score FORM_FRAUD_3 1.302
score FORM_FRAUD_5 0.001
-score FROM_MISSPACED 1.961
-score FROM_MISSP_DYNIP 2.779
-score FROM_MISSP_EH_MATCH 1.822
+score FROM_MISSPACED 1.064
+score FROM_MISSP_DYNIP 0.187
+score FROM_MISSP_EH_MATCH 1.545
score FROM_MISSP_FREEMAIL 4.399
-score FROM_MISSP_MSFT 3.762
-score FROM_MISSP_PHISH 4.294
-score FROM_MISSP_REPLYTO 2.504
+score FROM_MISSP_MSFT 4.057
+score FROM_MISSP_REPLYTO 3.891
score FROM_MISSP_SPF_FAIL 0.001
-score FROM_MISSP_TO_UNDISC 2.169
-score FROM_MISSP_USER 1.882
-score FROM_WSP_LEAD 2.499
-score FSL_CTYPE_WIN1251 2.445
+score FROM_MISSP_TO_UNDISC 3.578
+score FROM_MISSP_USER 3.078
+score FSL_CTYPE_WIN1251 2.997
score FSL_HELO_BARE_IP_2 1.999
-score FSL_HELO_FAKE 3.199
-score FSL_MISSP_REPLYTO 3.018
-score FSL_MY_NAME_IS 2.735
-score FSL_NEW_HELO_USER 0.299
-score HK_LOTTO_SUBJECT 0.999
+score FSL_HELO_FAKE 3.099
+score FSL_MISSP_REPLYTO 2.763
+score FSL_NEW_HELO_USER 2.012
score HK_NAME_FM_MR_MRS 1.499
-score HK_NAME_MR_MRS 0.308
-score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM_N1 1.906
-score HK_SCAM_N2 2.941
-score HK_SCAM_N4 2.700
-score HK_SPAMMY_FILENAME 2.399
+score HK_SCAM_N1 1.908
+score HK_SCAM_N2 2.577
score LOTS_OF_MONEY 0.001 # force non-zero
score LOTTO_AGENT 0.001
-score LOTTO_DEPT 0.001
-score MAILER_EQ_ORG 0.671
-score MALFORMED_FREEMAIL 1.745
-score MIME_MALF 1.293
-score MONEY_ATM_CARD 0.001 # force non-zero
-score MONEY_FORM 0.279
-score MONEY_FORM_SHORT 2.375
-score MONEY_FRAUD_3 2.902
-score MONEY_FRAUD_5 2.497
+score MONEY_ATM_CARD 1.445
+score MONEY_FORM 0.164
+score MONEY_FORM_SHORT 2.099
+score MONEY_FRAUD_3 3.677
+score MONEY_FRAUD_5 2.629
score MONEY_FROM_41 1.999
-score MONEY_FROM_MISSP 0.914
-score NSL_RCVD_FROM_USER 2.355
-score NSL_RCVD_HELO_USER 1.727
-score OBFU_TEXT_ATTACH 2.699
+score MONEY_FROM_MISSP 1.210
+score NSL_RCVD_FROM_USER 0.639
+score NSL_RCVD_HELO_USER 0.910
+score OBFU_TEXT_ATTACH 2.700
score PHP_NOVER_MUA 3.499
-score RCVD_IN_MSPIKE_H2 -0.109
-score RCVD_IN_MSPIKE_L3 1.973
+score RCVD_IN_MSPIKE_H2 -0.110
+score RCVD_IN_MSPIKE_L3 1.884
score RCVD_IN_MSPIKE_L4 0.001
-score RCVD_IN_MSPIKE_L5 1.127
-score RCVD_IN_MSPIKE_ZBI 0.001
-score RISK_FREE 0.680
+score RCVD_IN_MSPIKE_L5 3.199
+score RCVD_IN_MSPIKE_ZBI 0.001 # force non-zero
+score RISK_FREE 0.068
score RP_MATCHES_RCVD -0.001 # force non-zero
-score SHARE_50_50 1.210
-score STYLE_GIBBERISH 2.726
-score TAB_IN_FROM 0.001
-score TO_EQ_FM_DOM_SPF_FAIL 1.122
-score TO_EQ_FM_SPF_FAIL 1.941
+score TAB_IN_FROM 0.001 # force non-zero
+score TO_EQ_FM_DOM_SPF_FAIL 1.134
+score TO_EQ_FM_SPF_FAIL 1.953
score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_MSFT 3.499
-score TO_NO_BRKTS_PCNT 0.935
-score TVD_FROM_1 0.999
-score TVD_PDF_FINGER01 3.299
-score TVD_PH_BODY_META 2.699
-score URIBL_MW_SURBL 1.724
-score XM_PHPMAILER_FORGED 2.699
+score TVD_FROM_1 1.000
+score URIBL_MW_SURBL 2.576
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
score RCVD_IN_MSPIKE_BL 0.010
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1541789&r1=1541788&r2=1541789&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Thu Nov 14 02:48:57 2013
@@ -1,100 +1,78 @@
-# Using score set 0 logs for revision 1540972 from:
-# ham-axb-8mile.log ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-sa-users.log ham-bb-guenther_fraud.log ham-bb-jhardin.log ham-bb-jhardin_fraud.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-grenier.log ham-jarif.log ham-kpg-core.log ham-mmiroslaw-ham.log ham-mmiroslaw-spam.log ham-zmi.log spam-axb-8mile.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-sa-users.log spam-bb-guenther_fraud.log spam-bb-jhardin.log spam-bb-jhardin_fraud.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-grenier.log spam-jarif.log spam-kpg-core.log spam-mmiroslaw-ham.log spam-mmiroslaw-spam.log spam-zmi.log
+# Using score set 0 logs for revision 1541424 from:
+# ham-axb-8mile.log ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-sa-users.log ham-bb-guenther_fraud.log ham-bb-jhardin.log ham-bb-jhardin_fraud.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-grenier.log ham-jarif.log ham-kpg-core.log ham-mas-cps.log ham-mas-mas.log ham-mmiroslaw-ham.log ham-mmiroslaw-spam.log ham-zmi.log spam-axb-8mile.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-sa-users.log spam-bb-guenther_fraud.log spam-bb-jhardin.log spam-bb-jhardin_fraud.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-grenier.log spam-jarif.log spam-kpg-core.log spam-mas-cps.log spam-mas-mas.log spam-mmiroslaw-ham.log spam-mmiroslaw-spam.log spam-zmi.log
-score ADVANCE_FEE_2_NEW_FORM 0.486
-score ADVANCE_FEE_2_NEW_FRM_MNY 2.213
-score ADVANCE_FEE_2_NEW_MONEY 2.650
-score ADVANCE_FEE_3_NEW 1.997
-score ADVANCE_FEE_3_NEW_FORM 1.520
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.370
-score ADVANCE_FEE_3_NEW_MONEY 0.177
-score ADVANCE_FEE_4_NEW 0.001
-score ADVANCE_FEE_4_NEW_FORM 0.001 # force non-zero
-score ADVANCE_FEE_4_NEW_FRM_MNY 2.930
-score ADVANCE_FEE_4_NEW_MONEY 2.354
-score ADVANCE_FEE_5_NEW 0.001
-score ADVANCE_FEE_5_NEW_FORM 0.001
-score ADVANCE_FEE_5_NEW_FRM_MNY 2.208
-score ADVANCE_FEE_5_NEW_MONEY 0.773
-score AXB_3LITTLE_PIGS 0.517
-score AXB_ONMS_LEAKS 3.099
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.439
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 3.380
-score AXB_XMAILER_MIMEOLE_OL_E9F46 2.599
-score AXB_XMA_BASP 2.767
-score AXB_XM_FORGED_OL2600 2.399
-score BIGNUM_EMAILS 0.001
-score BILLION_OVERLAP -0.870
-score BODY_EMPTY 1.600
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.250
-score CN_B2B_SPAMMER 3.599
-score COMMENT_GIBBERISH 0.999
-score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 2.699
-score DATE_IN_FUTURE_Q_PLUS 3.099
-score DEAR_BENEFICIARY 3.099
-score DSN_NO_MIMEVERSION 1.999
-score EMAIL_URI_PHISH 3.999
-score FBI_SPOOF 0.502
+score ADVANCE_FEE_2_NEW_FORM 1.795
+score ADVANCE_FEE_2_NEW_FRM_MNY 1.202
+score ADVANCE_FEE_2_NEW_MONEY 1.995
+score ADVANCE_FEE_3_NEW 0.606
+score ADVANCE_FEE_3_NEW_FORM 2.234
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.073
+score ADVANCE_FEE_3_NEW_MONEY 0.001
+score ADVANCE_FEE_4_NEW 2.440
+score ADVANCE_FEE_4_NEW_FORM 0.001
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.001
+score ADVANCE_FEE_5_NEW 0.774
+score ADVANCE_FEE_5_NEW_FORM 0.144
+score ADVANCE_FEE_5_NEW_FRM_MNY 1.559
+score ADVANCE_FEE_5_NEW_MONEY 0.001
+score AXB_3LITTLE_PIGS 1.546
+score AXB_ONMS_LEAKS 3.096
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.400
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.992
+score AXB_XMAILER_MIMEOLE_OL_E9F46 2.596
+score AXB_XMA_BASP 3.895
+score BILLION_OVERLAP -0.660
+score BODY_EMPTY 2.098
+score CK_HELO_DYNAMIC_SPLIT_IP 1.498
+score CN_B2B_SPAMMER 3.595
+score COMMENT_GIBBERISH 0.998
+score COMPENSATION 1.498
+score DATE_IN_FUTURE_96_Q 2.696
+score DATE_IN_FUTURE_Q_PLUS 3.096
+score DEAR_BENEFICIARY 3.096
+score DSN_NO_MIMEVERSION 1.997
+score EMAIL_URI_PHISH 3.995
score FILL_THIS_FORM 0.001
-score FORM_FRAUD_3 2.192
+score FORM_FRAUD_3 1.572
score FORM_FRAUD_5 0.001
-score FROM_MISSPACED 0.001
-score FROM_MISSP_DYNIP 1.772
-score FROM_MISSP_EH_MATCH 1.511
-score FROM_MISSP_FREEMAIL 4.299
-score FROM_MISSP_MSFT 4.299
-score FROM_MISSP_PHISH 1.835
-score FROM_MISSP_REPLYTO 0.354
-score FROM_MISSP_TO_UNDISC 3.862
-score FROM_MISSP_USER 3.999
-score FROM_WSP_LEAD 2.399
-score FSL_CTYPE_WIN1251 4.299
-score FSL_HELO_BARE_IP_2 2.000
-score FSL_HELO_FAKE 3.099
-score FSL_MISSP_REPLYTO 1.839
-score FSL_MY_NAME_IS 2.349
-score FSL_NEW_HELO_USER 0.850
-score HK_LOTTO_SUBJECT 0.001
-score HK_NAME_FM_MR_MRS 1.499
-score HK_NAME_MR_MRS 0.999
-score HK_RANDOM_FROM 1.000
-score HK_RANDOM_REPLYTO 0.001
-score HK_SCAM_N1 1.500
-score HK_SCAM_N2 3.314
-score HK_SCAM_N4 0.688
+score FROM_MISSPACED 1.453
+score FROM_MISSP_DYNIP 2.345
+score FROM_MISSP_EH_MATCH 1.999
+score FROM_MISSP_FREEMAIL 4.295
+score FROM_MISSP_MSFT 4.296
+score FROM_MISSP_REPLYTO 4.296
+score FROM_MISSP_TO_UNDISC 3.698
+score FROM_MISSP_USER 1.807
+score FSL_CTYPE_WIN1251 4.295
+score FSL_HELO_BARE_IP_2 1.998
+score FSL_HELO_FAKE 3.096
+score FSL_MISSP_REPLYTO 1.841
+score FSL_NEW_HELO_USER 0.844
+score HK_NAME_FM_MR_MRS 1.498
+score HK_SCAM_N1 1.499
+score HK_SCAM_N2 3.581
score LOTS_OF_MONEY 0.001 # force non-zero
-score LOTTO_AGENT 0.001
-score LOTTO_DEPT 0.001
-score MALFORMED_FREEMAIL 2.899
-score MONEY_ATM_CARD 2.899
+score LOTTO_AGENT 0.391
+score MONEY_ATM_CARD 2.996
score MONEY_FORM 0.001
-score MONEY_FORM_SHORT 3.478
-score MONEY_FRAUD_3 3.289
-score MONEY_FRAUD_5 1.661
-score MONEY_FROM_41 1.999
-score MONEY_FROM_MISSP 1.730
-score NSL_RCVD_FROM_USER 1.856
-score NSL_RCVD_HELO_USER 3.031
-score OBFU_HTML_ATTACH 2.699
+score MONEY_FORM_SHORT 3.480
+score MONEY_FRAUD_3 3.999
+score MONEY_FRAUD_5 1.543
+score MONEY_FROM_41 1.997
+score MONEY_FROM_MISSP 1.589
+score NSL_RCVD_FROM_USER 1.958
+score NSL_RCVD_HELO_USER 2.039
score OBFU_TEXT_ATTACH 2.597
-score PHP_NOVER_MUA 3.499
-score RISK_FREE 2.599
-score RP_MATCHES_RCVD -1.502
-score STYLE_GIBBERISH 1.700
+score PHP_NOVER_MUA 3.496
+score RISK_FREE 2.593
+score RP_MATCHES_RCVD -1.499
score TAB_IN_FROM 0.001
-score TO_NO_BRKTS_FROM_MSSP 2.248
-score TO_NO_BRKTS_MSFT 3.500
-score TO_NO_BRKTS_PCNT 0.001
-score TVD_FROM_1 1.000
-score TVD_PDF_FINGER01 3.299
-score TVD_PH_BODY_META 1.400
-score BITLY_URI 1.000
-score FBI_MONEY 1.000
+score TO_NO_BRKTS_FROM_MSSP 2.497
+score TO_NO_BRKTS_MSFT 3.496
+score TVD_FROM_1 0.998
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
-score MIME_MALF 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
score RCVD_IN_MSPIKE_BL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1541789&r1=1541788&r2=1541789&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Thu Nov 14 02:48:57 2013
@@ -1,113 +1,85 @@
# Using score set 1 logs for revision 1540279 from:
# ham-net-axb-8mile.log ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-bb-guenther_fraud.log ham-net-bb-jhardin.log ham-net-bb-jhardin_fraud.log ham-net-bb-jm.log ham-net-bb-kmcgrail.log ham-net-bb-zmi.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bpoliakoff.log ham-net-grenier.log ham-net-jarif.log ham-net-kpg-core.log ham-net-mas-cps.log ham-net-mas-mas.log ham-net-mmiroslaw-ham.log ham-net-mmiroslaw-spam.log ham-net-zmi.log spam-net-axb-8mile.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin.log spam-net-bb-jhardin_fraud.log spam-net-bb-jm.log spam-net-bb-kmcgrail.log spam-net-bb-zmi.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bpoliakoff.log spam-net-grenier.log spam-net-jarif.log spam-net-kpg-core.log spam-net-mas-cps.log spam-net-mas-mas.log spam-net-mmiroslaw-ham.log spam-net-mmiroslaw-spam.log spam-net-zmi.log
-score ADVANCE_FEE_2_NEW_FORM 0.610
-score ADVANCE_FEE_2_NEW_FRM_MNY 1.566
-score ADVANCE_FEE_2_NEW_MONEY 3.856
-score ADVANCE_FEE_3_NEW 1.427
-score ADVANCE_FEE_3_NEW_FORM 1.677
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.950
+score ADVANCE_FEE_2_NEW_FORM 0.603
+score ADVANCE_FEE_2_NEW_FRM_MNY 0.750
+score ADVANCE_FEE_2_NEW_MONEY 3.859
+score ADVANCE_FEE_3_NEW 2.249
+score ADVANCE_FEE_3_NEW_FORM 2.291
+score ADVANCE_FEE_3_NEW_FRM_MNY 3.334
score ADVANCE_FEE_3_NEW_MONEY 0.001
-score ADVANCE_FEE_4_NEW 1.919
+score ADVANCE_FEE_4_NEW 2.033
score ADVANCE_FEE_4_NEW_FORM 0.001
score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW 0.001 # force non-zero
-score ADVANCE_FEE_5_NEW_FORM 0.125
-score ADVANCE_FEE_5_NEW_FRM_MNY 3.132
-score ADVANCE_FEE_5_NEW_MONEY 0.001
-score AXB_3LITTLE_PIGS 0.612
-score AXB_BODYMAIL_SBL112884 1.645
+score ADVANCE_FEE_5_NEW 0.001
+score ADVANCE_FEE_5_NEW_FORM 2.512
+score ADVANCE_FEE_5_NEW_FRM_MNY 2.999
+score ADVANCE_FEE_5_NEW_MONEY 0.001 # force non-zero
+score AXB_3LITTLE_PIGS 2.407
score AXB_ONMS_LEAKS 2.999
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.800
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.135
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.901
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.747
score AXB_XMAILER_MIMEOLE_OL_E9F46 2.599
-score AXB_XMA_BASP 3.468
-score AXB_XM_FORGED_OL2600 0.997
-score BIGNUM_EMAILS 0.041
-score BILLION_OVERLAP -0.188
-score BITLY_URI 2.249
-score BODY_EMPTY 2.999
+score AXB_XMA_BASP 2.964
+score BILLION_OVERLAP -0.999
+score BODY_EMPTY 3.000
score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.250
-score CN_B2B_SPAMMER 3.388
+score CN_B2B_SPAMMER 3.599
score COMMENT_GIBBERISH 0.999
score COMPENSATION 1.499
-score DATE_IN_FUTURE_96_Q 2.700
+score DATE_IN_FUTURE_96_Q 2.699
score DATE_IN_FUTURE_Q_PLUS 2.999
-score DEAR_BENEFICIARY 2.999
-score DEAR_EMAIL_USER 2.399
+score DEAR_BENEFICIARY 3.100
score DSN_NO_MIMEVERSION 1.999
score EMAIL_URI_PHISH 3.999
-score FBI_MONEY 0.655
-score FBI_SPOOF 1.756
-score FH_FROM_START_YOU 1.976
score FILL_THIS_FORM 0.001
-score FORM_FRAUD_3 0.861
+score FORM_FRAUD_3 1.302
score FORM_FRAUD_5 0.001
-score FROM_MISSPACED 1.961
-score FROM_MISSP_DYNIP 2.779
-score FROM_MISSP_EH_MATCH 1.822
+score FROM_MISSPACED 1.064
+score FROM_MISSP_DYNIP 0.187
+score FROM_MISSP_EH_MATCH 1.545
score FROM_MISSP_FREEMAIL 4.399
-score FROM_MISSP_MSFT 3.762
-score FROM_MISSP_PHISH 4.294
-score FROM_MISSP_REPLYTO 2.504
+score FROM_MISSP_MSFT 4.057
+score FROM_MISSP_REPLYTO 3.891
score FROM_MISSP_SPF_FAIL 0.001
-score FROM_MISSP_TO_UNDISC 2.169
-score FROM_MISSP_USER 1.882
-score FROM_WSP_LEAD 2.499
-score FSL_CTYPE_WIN1251 2.445
+score FROM_MISSP_TO_UNDISC 3.578
+score FROM_MISSP_USER 3.078
+score FSL_CTYPE_WIN1251 2.997
score FSL_HELO_BARE_IP_2 1.999
-score FSL_HELO_FAKE 3.199
-score FSL_MISSP_REPLYTO 3.018
-score FSL_MY_NAME_IS 2.735
-score FSL_NEW_HELO_USER 0.299
-score HK_LOTTO_SUBJECT 0.999
+score FSL_HELO_FAKE 3.099
+score FSL_MISSP_REPLYTO 2.763
+score FSL_NEW_HELO_USER 2.012
score HK_NAME_FM_MR_MRS 1.499
-score HK_NAME_MR_MRS 0.308
-score HK_RANDOM_FROM 0.999
-score HK_RANDOM_REPLYTO 0.999
-score HK_SCAM_N1 1.906
-score HK_SCAM_N2 2.941
-score HK_SCAM_N4 2.700
-score HK_SPAMMY_FILENAME 2.399
+score HK_SCAM_N1 1.908
+score HK_SCAM_N2 2.577
score LOTS_OF_MONEY 0.001 # force non-zero
score LOTTO_AGENT 0.001
-score LOTTO_DEPT 0.001
-score MAILER_EQ_ORG 0.671
-score MALFORMED_FREEMAIL 1.745
-score MIME_MALF 1.293
-score MONEY_ATM_CARD 0.001 # force non-zero
-score MONEY_FORM 0.279
-score MONEY_FORM_SHORT 2.375
-score MONEY_FRAUD_3 2.902
-score MONEY_FRAUD_5 2.497
+score MONEY_ATM_CARD 1.445
+score MONEY_FORM 0.164
+score MONEY_FORM_SHORT 2.099
+score MONEY_FRAUD_3 3.677
+score MONEY_FRAUD_5 2.629
score MONEY_FROM_41 1.999
-score MONEY_FROM_MISSP 0.914
-score NSL_RCVD_FROM_USER 2.355
-score NSL_RCVD_HELO_USER 1.727
-score OBFU_TEXT_ATTACH 2.699
+score MONEY_FROM_MISSP 1.210
+score NSL_RCVD_FROM_USER 0.639
+score NSL_RCVD_HELO_USER 0.910
+score OBFU_TEXT_ATTACH 2.700
score PHP_NOVER_MUA 3.499
-score RCVD_IN_MSPIKE_H2 -0.109
-score RCVD_IN_MSPIKE_L3 1.973
+score RCVD_IN_MSPIKE_H2 -0.110
+score RCVD_IN_MSPIKE_L3 1.884
score RCVD_IN_MSPIKE_L4 0.001
-score RCVD_IN_MSPIKE_L5 1.127
-score RCVD_IN_MSPIKE_ZBI 0.001
-score RISK_FREE 0.680
+score RCVD_IN_MSPIKE_L5 3.199
+score RCVD_IN_MSPIKE_ZBI 0.001 # force non-zero
+score RISK_FREE 0.068
score RP_MATCHES_RCVD -0.001 # force non-zero
-score SHARE_50_50 1.210
-score STYLE_GIBBERISH 2.726
-score TAB_IN_FROM 0.001
-score TO_EQ_FM_DOM_SPF_FAIL 1.122
-score TO_EQ_FM_SPF_FAIL 1.941
+score TAB_IN_FROM 0.001 # force non-zero
+score TO_EQ_FM_DOM_SPF_FAIL 1.134
+score TO_EQ_FM_SPF_FAIL 1.953
score TO_NO_BRKTS_FROM_MSSP 2.499
score TO_NO_BRKTS_MSFT 3.499
-score TO_NO_BRKTS_PCNT 0.935
-score TVD_FROM_1 0.999
-score TVD_PDF_FINGER01 3.299
-score TVD_PH_BODY_META 2.699
-score URIBL_MW_SURBL 1.724
-score XM_PHPMAILER_FORGED 2.699
+score TVD_FROM_1 1.000
+score URIBL_MW_SURBL 2.576
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
score RCVD_IN_MSPIKE_BL 0.010
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1541789&r1=1541788&r2=1541789&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Thu Nov 14 02:48:57 2013
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 166182 30.365% (94.581% of non-spam corpus)
-# Correctly spam: 236156 43.151% (63.556% of spam corpus)
-# False positives: 9521 1.740% (5.419% of nonspam, 621821 weighted)
-# False negatives: 135415 24.744% (36.444% of spam, 352746 weighted)
-# Average score for spam: 6.5 nonspam: 1.1
-# Average for false-pos: 6.2 false-neg: 2.6
-# TOTAL: 547274 100.00%
+# Correctly non-spam: 181676 31.957% (94.859% of non-spam corpus)
+# Correctly spam: 235451 41.416% (62.457% of spam corpus)
+# False positives: 9847 1.732% (5.141% of nonspam, 594992 weighted)
+# False negatives: 141531 24.895% (37.543% of spam, 363868 weighted)
+# Average score for spam: 6.2 nonspam: 1.0
+# Average for false-pos: 6.1 false-neg: 2.6
+# TOTAL: 568505 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 20786 94.10%
-# Correctly spam: 29518 63.80%
-# False positives: 1304 5.90%
-# False negatives: 16751 36.20%
-# TCR(l=50): 0.564593 SpamRecall: 63.796% SpamPrec: 95.769%
+# Correctly non-spam: 22747 94.68%
+# Correctly spam: 29291 62.32%
+# False positives: 1278 5.32%
+# False negatives: 17707 37.68%
+# TCR(l=50): 0.575906 SpamRecall: 62.324% SpamPrec: 95.819%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 166443 94.73%
-# Correctly spam: 42098 11.33%
-# False positives: 9260 5.27%
-# False negatives: 329473 88.67%
-# TCR(l=50): 0.468875 SpamRecall: 11.330% SpamPrec: 81.970%
+# Correctly non-spam: 182079 95.07%
+# Correctly spam: 41594 11.03%
+# False positives: 9444 4.93%
+# False negatives: 335388 88.97%
+# TCR(l=50): 0.466800 SpamRecall: 11.033% SpamPrec: 81.496%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 20856 94.41%
-# Correctly spam: 5298 11.45%
-# False positives: 1234 5.59%
-# False negatives: 40971 88.55%
-# TCR(l=50): 0.450653 SpamRecall: 11.450% SpamPrec: 81.108%
+# Correctly non-spam: 22835 95.05%
+# Correctly spam: 5219 11.10%
+# False positives: 1190 4.95%
+# False negatives: 41779 88.90%
+# TCR(l=50): 0.464045 SpamRecall: 11.105% SpamPrec: 81.432%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1541789&r1=1541788&r2=1541789&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Thu Nov 14 02:48:57 2013
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 185907 59.295% (99.222% of non-spam corpus)
-# Correctly spam: 87163 27.801% (69.086% of spam corpus)
-# False positives: 1457 0.465% (0.778% of nonspam, 62847 weighted)
-# False negatives: 39003 12.440% (30.914% of spam, 107815 weighted)
-# Average score for spam: 11.7 nonspam: -0.2
-# Average for false-pos: 6.4 false-neg: 2.8
-# TOTAL: 313530 100.00%
+# Correctly non-spam: 185932 59.327% (99.237% of non-spam corpus)
+# Correctly spam: 85993 27.438% (68.225% of spam corpus)
+# False positives: 1429 0.456% (0.763% of nonspam, 61738 weighted)
+# False negatives: 40050 12.779% (31.775% of spam, 105688 weighted)
+# Average score for spam: 11.6 nonspam: -0.2
+# Average for false-pos: 6.4 false-neg: 2.6
+# TOTAL: 313404 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 23309 99.12%
-# Correctly spam: 10904 68.84%
-# False positives: 206 0.88%
-# False negatives: 4935 31.16%
-# TCR(l=50): 1.039646 SpamRecall: 68.843% SpamPrec: 98.146%
+# Correctly non-spam: 23338 99.25%
+# Correctly spam: 10804 68.28%
+# False positives: 177 0.75%
+# False negatives: 5018 31.72%
+# TCR(l=50): 1.140900 SpamRecall: 68.285% SpamPrec: 98.388%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 186462 99.52%
-# Correctly spam: 73111 57.95%
-# False positives: 902 0.48%
-# False negatives: 53055 42.05%
-# TCR(l=50): 1.285375 SpamRecall: 57.948% SpamPrec: 98.781%
+# Correctly non-spam: 186428 99.50%
+# Correctly spam: 73056 57.96%
+# False positives: 933 0.50%
+# False negatives: 52987 42.04%
+# TCR(l=50): 1.265022 SpamRecall: 57.961% SpamPrec: 98.739%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 23385 99.45%
-# Correctly spam: 9142 57.72%
-# False positives: 130 0.55%
-# False negatives: 6697 42.28%
-# TCR(l=50): 1.200197 SpamRecall: 57.718% SpamPrec: 98.598%
+# Correctly non-spam: 23414 99.57%
+# Correctly spam: 9161 57.90%
+# False positives: 101 0.43%
+# False negatives: 6661 42.10%
+# TCR(l=50): 1.351037 SpamRecall: 57.900% SpamPrec: 98.910%