You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2017/03/12 02:43:29 UTC
svn commit: r1786555 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Sun Mar 12 02:43:28 2017
New Revision: 1786555
URL: http://svn.apache.org/viewvc?rev=1786555&view=rev
Log:
updated scores for revision 1786494 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1786555&r1=1786554&r2=1786555&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Sun Mar 12 02:43:28 2017
@@ -1,6 +1,6 @@
score AC_BR_BONANZA 0.001 0.001 0.001 0.001
score AC_DIV_BONANZA 0.001 0.001 0.001 0.001
-score AC_HTML_NONSENSE_TAGS 1.000 0.001 1.000 0.001
+score AC_HTML_NONSENSE_TAGS 0.001 1.000 0.001 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000 1.000 1.000 1.000
@@ -11,87 +11,82 @@ score AC_SPAMMY_URI_PATTERNS4
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
-score ADVANCE_FEE_2_NEW_MONEY 1.997 0.001 1.997 0.001
-score ADVANCE_FEE_3_NEW 3.496 0.001 3.496 0.001
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.598 0.001 0.598 0.001
-score ADVANCE_FEE_3_NEW_MONEY 2.896 0.001 2.896 0.001
-score ADVANCE_FEE_4_NEW 2.596 0.001 2.596 0.001
-score ADVANCE_FEE_5_NEW 2.996 0.001 2.996 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.750 0.001 0.750 0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.281 0.001 0.281 0.001
-score AXB_XM_FORGED_OL2600 0.806 1.442 0.806 1.442
-score BODY_EMPTY 1.997 1.999 1.997 1.999
-score BODY_URI_ONLY 0.998 0.001 0.998 0.001
-score BOGUS_MSM_HDRS 1.898 0.001 1.898 0.001
-score CANT_SEE_AD 2.996 0.797 2.996 0.797
+score ADVANCE_FEE_2_NEW_MONEY 0.001 1.999 0.001 1.999
+score ADVANCE_FEE_3_NEW 0.001 3.500 0.001 3.500
+score ADVANCE_FEE_3_NEW_MONEY 0.583 2.700 0.583 2.700
+score ADVANCE_FEE_4_NEW 2.596 2.499 2.596 2.499
+score ADVANCE_FEE_5_NEW 0.001 2.899 0.001 2.899
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 1.533 0.001 1.533
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.001 2.755 0.001 2.755
+score AXB_XM_FORGED_OL2600 1.419 2.382 1.419 2.382
+score BODY_EMPTY 0.099 1.999 0.099 1.999
+score BODY_URI_ONLY 0.001 1.000 0.001 1.000
+score BOGUS_MSM_HDRS 0.001 1.352 0.001 1.352
+score CANT_SEE_AD 2.996 1.914 2.996 1.914
score CK_HELO_DYNAMIC_SPLIT_IP 1.498 0.001 1.498 0.001
-score CK_HELO_GENERIC 0.249 0.249 0.249 0.249
-score CN_B2B_SPAMMER 0.001 0.001 0.001 0.001
-score COMMENT_GIBBERISH 1.498 1.499 1.498 1.499
-score DATE_IN_FUTURE_96_Q 3.296 3.099 3.296 3.099
+score CK_HELO_GENERIC 0.248 0.249 0.248 0.249
+score CN_B2B_SPAMMER 0.001 2.299 0.001 2.299
+score COMMENT_GIBBERISH 1.499 1.500 1.499 1.500
+score DATE_IN_FUTURE_96_Q 3.296 3.199 3.296 3.199
score ENCRYPTED_MESSAGE -1.000 -1.000 -1.000 -1.000
-score FBI_MONEY 0.521 1.868 0.521 1.868
-score FBI_SPOOF 1.422 1.855 1.422 1.855
-score FILL_THIS_FORM 1.198 0.001 1.198 0.001
-score FORM_FRAUD 0.998 0.001 0.998 0.001
-score FORM_FRAUD_3 2.696 0.001 2.696 0.001
-score FORM_FRAUD_5 0.016 0.001 0.016 0.001
+score FBI_MONEY 0.374 1.348 0.374 1.348
+score FBI_SPOOF 1.999 1.000 1.999 1.000
+score FILL_THIS_FORM 0.001 0.001 0.001 0.001
+score FORM_FRAUD 0.001 0.999 0.001 0.999
+score FORM_FRAUD_3 0.001 2.499 0.001 2.499
+score FORM_FRAUD_5 0.001 0.001 0.001 0.001
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score FOUND_YOU 2.918 2.957 2.918 2.957
-score FREEMAIL_DOC_PDF_BCC 2.596 2.599 2.596 2.599
+score FOUND_YOU 1.965 3.249 1.965 3.249
+score FREEMAIL_DOC_PDF_BCC 2.596 2.499 2.596 2.499
score FREEMAIL_FORGED_FROMDOMAIN 0.001 0.249 0.001 0.249
-score FROM_IN_TO_AND_SUBJ 0.889 0.149 0.889 0.149
+score FROM_IN_TO_AND_SUBJ 1.099 0.698 1.099 0.698
score FROM_MISSPACED 0.001 0.001 0.001 0.001
-score FROM_MISSP_FREEMAIL 3.695 0.001 3.695 0.001
+score FROM_MISSP_FREEMAIL 0.001 3.390 0.001 3.390
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
-score FROM_MISSP_PHISH 3.496 0.136 3.496 0.136
score FROM_MISSP_REPLYTO 0.001 0.001 0.001 0.001
score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000
-score FROM_MISSP_TO_UNDISC 3.196 0.001 3.196 0.001
+score FROM_MISSP_TO_UNDISC 0.001 3.099 0.001 3.099
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
score FROM_MISSP_XPRIO 0.001 0.001 0.001 0.001
-score FROM_WORDY 2.497 0.001 2.497 0.001
+score FROM_WORDY 1.884 2.499 1.884 2.499
score FROM_WORDY_SHORT 1.000 1.000 1.000 1.000
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
score FSL_HELO_BARE_IP_2 1.498 1.499 1.498 1.499
-score FSL_NEW_HELO_USER 0.248 0.001 0.248 0.001
+score FSL_NEW_HELO_USER 0.001 0.095 0.001 0.095
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
score GOOG_MALWARE_DNLD 1.000 1.000 1.000 1.000
-score HDRS_LCASE 0.099 0.099 0.099 0.099
+score HDRS_LCASE 0.099 0.100 0.099 0.100
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001
-score HELO_MISC_IP 0.249 0.249 0.249 0.249
+score HELO_MISC_IP 0.249 0.250 0.249 0.250
score HEXHASH_WORD 1.000 1.000 1.000 1.000
score HK_RANDOM_FROM 0.998 0.999 0.998 0.999
-score HK_SCAM_N15 2.391 2.399 2.391 2.399
-score HK_SCAM_N2 3.496 0.001 3.496 0.001
+score HK_SCAM_N15 2.596 1.083 2.596 1.083
+score HK_SCAM_N2 0.001 2.160 0.001 2.160
score HTML_OFF_PAGE 1.000 1.000 1.000 1.000
score IMG_DIRECT_TO_MX 2.497 2.399 2.497 2.399
score LIST_PRTL_PUMPDUMP 1.000 1.000 1.000 1.000
-score LIST_PRTL_SAME_USER 0.001 0.278 0.001 0.278
-score LONG_HEX_URI 2.414 2.496 2.414 2.496
-score LONG_IMG_URI 0.552 0.118 0.552 0.118
+score LIST_PRTL_SAME_USER 0.001 0.275 0.001 0.275
+score LONG_HEX_URI 2.796 2.307 2.796 2.307
+score LONG_IMG_URI 0.552 0.099 0.552 0.099
score LOTS_OF_MONEY 0.001 0.010 0.001 0.010
-score LOTTO_AGENT 1.498 1.499 1.498 1.499
+score LOTTO_AGENT 1.498 1.500 1.498 1.500
score LOTTO_DEPT 0.001 0.001 0.001 0.001
score LUCRATIVE 1.000 1.000 1.000 1.000
-score MIMEOLE_DIRECT_TO_MX 1.445 0.125 1.445 0.125
-score MIME_NO_TEXT 1.000 1.999 1.000 1.999
-score MONEY_BARRISTER 0.001 0.001 0.001 0.001
-score MONEY_FRAUD_3 2.996 0.001 2.996 0.001
-score MONEY_FRAUD_5 3.197 0.001 3.197 0.001
-score MONEY_FRAUD_8 2.778 0.001 2.778 0.001
-score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
-score MONEY_LOTTERY 2.497 1.766 2.497 1.766
-score MSGID_NOFQDN1 2.394 3.499 2.394 3.499
-score MSM_PRIO_REPTO 2.497 2.499 2.497 2.499
-score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
-score NSL_RCVD_HELO_USER 0.052 0.001 0.052 0.001
-score OBFU_TEXT_ATTACH 0.001 0.001 0.001 0.001
+score MIMEOLE_DIRECT_TO_MX 1.445 1.999 1.445 1.999
+score MIME_NO_TEXT 1.000 1.000 1.000 1.000
+score MONEY_FRAUD_3 0.001 2.799 0.001 2.799
+score MONEY_FRAUD_5 0.001 2.999 0.001 2.999
+score MONEY_FRAUD_8 0.001 1.300 0.001 1.300
+score MONEY_LOTTERY 2.599 1.174 2.599 1.174
+score MSGID_NOFQDN1 2.396 3.300 2.396 3.300
+score MSM_PRIO_REPTO 0.001 2.499 0.001 2.499
+score NSL_RCVD_FROM_USER 0.001 0.586 0.001 0.586
+score NSL_RCVD_HELO_USER 0.001 3.013 0.001 3.013
score PHP_NOVER_MUA 1.000 1.000 1.000 1.000
-score PHP_ORIG_SCRIPT 2.386 1.466 2.386 1.466
+score PHP_ORIG_SCRIPT 2.394 2.270 2.394 2.270
score PHP_SCRIPT_MUA 1.000 1.000 1.000 1.000
-score PP_MIME_FAKE_ASCII_TEXT 0.998 0.367 0.998 0.367
+score PP_MIME_FAKE_ASCII_TEXT 0.408 0.001 0.408 0.001
score PP_TOO_MUCH_UNICODE02 0.500 0.500 0.500 0.500
score PP_TOO_MUCH_UNICODE05 1.000 1.000 1.000 1.000
score PUMPDUMP 1.000 1.000 1.000 1.000
@@ -103,48 +98,48 @@ score RCVD_IN_MSPIKE_H3
score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 -1.000
score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L3 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L4 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L5 0.001 0.001 0.001 0.001
+score RCVD_IN_MSPIKE_L3 0.001 0.372 0.001 0.372
+score RCVD_IN_MSPIKE_L4 0.001 2.174 0.001 2.174
+score RCVD_IN_MSPIKE_L5 0.001 2.399 0.001 2.399
score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 -0.010
-score RCVD_IN_MSPIKE_ZBI 0.001 2.299 0.001 2.299
-score RCVD_IN_SORBS_WEB 0.001 2.035 0.001 2.035
-score RP_MATCHES_RCVD -1.101 -0.001 -1.101 -0.001
-score SPOOFED_FREEM_REPTO 2.497 2.499 2.497 2.499
-score SPOOFED_FREEM_REPTO_CHN 1.000 1.737 1.000 1.737
-score STATIC_XPRIO_OLE 1.997 0.997 1.997 0.997
-score STOCK_LOW_CONTRAST 2.032 2.500 2.032 2.500
+score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
+score RP_MATCHES_RCVD -1.050 -0.349 -1.050 -0.349
+score SHARE_50_50 0.001 2.159 0.001 2.159
+score SPOOFED_FREEM_REPTO 1.748 1.957 1.748 1.957
+score SPOOFED_FREEM_REPTO_CHN 1.000 1.000 1.000 1.000
+score STATIC_XPRIO_OLE 1.997 1.999 1.997 1.999
+score STOCK_LOW_CONTRAST 1.886 2.348 1.886 2.348
score STOCK_TIP 1.000 1.000 1.000 1.000
-score STYLE_GIBBERISH 2.796 3.499 2.796 3.499
+score STYLE_GIBBERISH 2.396 3.094 2.396 3.094
score SURBL_BLOCKED 0.001 0.001 0.001 0.001
score SYSADMIN 1.000 1.000 1.000 1.000
-score THIS_AD 1.054 2.100 1.054 2.100
-score TO_EQ_FM_DIRECT_MX 2.497 2.499 2.497 2.499
+score THIS_AD 1.485 2.009 1.485 2.009
+score TO_EQ_FM_DIRECT_MX 2.498 2.499 2.498 2.499
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
-score TO_IN_SUBJ 0.099 0.100 0.099 0.100
+score TO_IN_SUBJ 0.099 0.099 0.099 0.099
score TO_NO_BRKTS_FROM_MSSP 0.001 0.001 0.001 0.001
-score TO_NO_BRKTS_HTML_IMG 0.001 1.999 0.001 1.999
-score TO_NO_BRKTS_HTML_ONLY 1.997 1.999 1.997 1.999
-score TO_NO_BRKTS_MSFT 2.497 0.001 2.497 0.001
-score TO_NO_BRKTS_NORDNS_HTML 0.401 0.650 0.401 0.650
-score TO_NO_BRKTS_PCNT 2.497 0.960 2.497 0.960
-score TVD_SPACE_ENCODED 2.497 2.500 2.497 2.500
-score TVD_SPACE_ENC_FM_MIME 1.998 0.001 1.998 0.001
-score TVD_SPACE_RATIO_MINFP 2.497 2.499 2.497 2.499
+score TO_NO_BRKTS_HTML_IMG 0.001 1.919 0.001 1.919
+score TO_NO_BRKTS_HTML_ONLY 0.553 1.999 0.553 1.999
+score TO_NO_BRKTS_MSFT 0.001 2.499 0.001 2.499
+score TO_NO_BRKTS_NORDNS_HTML 0.399 0.650 0.399 0.650
+score TO_NO_BRKTS_PCNT 2.497 2.499 2.497 2.499
+score TVD_SPACE_ENCODED 0.001 2.499 0.001 2.499
+score TVD_SPACE_ENC_FM_MIME 0.001 1.999 0.001 1.999
+score TVD_SPACE_RATIO_MINFP 2.498 2.499 2.498 2.499
score TW_GIBBERISH_MANY 1.000 1.000 1.000 1.000
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
score URI_DATA 1.000 1.000 1.000 1.000
-score URI_DQ_UNSUB 0.001 2.299 0.001 2.299
-score URI_GOOGLE_PROXY 0.710 2.000 0.710 2.000
-score URI_ONLY_MSGID_MALF 0.001 1.999 0.001 1.999
+score URI_GOOGLE_PROXY 0.001 2.399 0.001 2.399
+score URI_ONLY_MSGID_MALF 0.001 0.001 0.001 0.001
score URI_OPTOUT_3LD 1.000 1.000 1.000 1.000
-score URI_PHISH 3.996 3.999 3.996 3.999
-score URI_TRY_3LD 0.510 0.001 0.510 0.001
-score URI_WPADMIN 3.296 2.599 3.296 2.599
-score URI_WP_DIRINDEX 1.000 2.999 1.000 2.999
+score URI_PHISH 3.995 3.999 3.995 3.999
+score URI_TRY_3LD 0.399 0.001 0.399 0.001
+score URI_TRY_USME 0.001 0.001 0.001 0.001
+score URI_WPADMIN 2.358 3.199 2.358 3.199
+score URI_WP_DIRINDEX 1.411 1.000 1.411 1.000
score URI_WP_HACKED 2.996 2.999 2.996 2.999
-score URI_WP_HACKED_2 1.478 1.756 1.478 1.756
-score XM_PHPMAILER_FORGED 2.232 2.399 2.232 2.399
-score XPRIO 2.248 2.249 2.248 2.249
+score URI_WP_HACKED_2 1.187 0.863 1.187 0.863
+score XM_PHPMAILER_FORGED 2.397 2.299 2.397 2.299
+score XPRIO 2.247 2.249 2.247 2.249
score XPRIO_SHORT_SUBJ 1.000 1.000 1.000 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1786555&r1=1786554&r2=1786555&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Sun Mar 12 02:43:28 2017
@@ -1,100 +1,99 @@
# Using score set 0 logs for revision 1786298 from:
-# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-bb-traps.log ham-darxus.log ham-ena.log ham-grenier.log ham-jarif.log ham-kgolding.log ham-thendrikx.log ham-zmi.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-bb-traps.log spam-darxus.log spam-ena.log spam-grenier.log spam-jarif.log spam-kgolding.log spam-thendrikx.log spam-zmi.log
+# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-bb-traps.log ham-darxus.log ham-dwarren.log ham-ena.log ham-grenier.log ham-jarif.log ham-kgolding.log ham-thendrikx.log ham-zmi.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-bb-traps.log spam-darxus.log spam-dwarren.log spam-ena.log spam-grenier.log spam-jarif.log spam-kgolding.log spam-thendrikx.log spam-zmi.log
-score AC_BR_BONANZA 0.001
+score AC_BR_BONANZA 0.001 # force non-zero
score AC_DIV_BONANZA 0.001
-score ADVANCE_FEE_2_NEW_MONEY 1.997
-score ADVANCE_FEE_3_NEW 3.496
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.598
-score ADVANCE_FEE_3_NEW_MONEY 2.896
+score AC_HTML_NONSENSE_TAGS 0.001
+score ADVANCE_FEE_2_NEW_MONEY 0.001
+score ADVANCE_FEE_3_NEW 0.001 # force non-zero
+score ADVANCE_FEE_3_NEW_MONEY 0.583
score ADVANCE_FEE_4_NEW 2.596
-score ADVANCE_FEE_5_NEW 2.996
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.750
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.281
-score AXB_XM_FORGED_OL2600 0.806
-score BODY_EMPTY 1.997
-score BODY_URI_ONLY 0.998
-score BOGUS_MSM_HDRS 1.898
+score ADVANCE_FEE_5_NEW 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.001
+score AXB_XM_FORGED_OL2600 1.419
+score BODY_EMPTY 0.099
+score BODY_URI_ONLY 0.001 # force non-zero
+score BOGUS_MSM_HDRS 0.001 # force non-zero
score CANT_SEE_AD 2.996
score CK_HELO_DYNAMIC_SPLIT_IP 1.498
-score CK_HELO_GENERIC 0.249
-score COMMENT_GIBBERISH 1.498
+score CK_HELO_GENERIC 0.248
+score CN_B2B_SPAMMER 0.001
+score COMMENT_GIBBERISH 1.499
score DATE_IN_FUTURE_96_Q 3.296
-score FBI_MONEY 0.521
-score FBI_SPOOF 1.422
-score FILL_THIS_FORM 1.198
-score FORM_FRAUD 0.998
-score FORM_FRAUD_3 2.696
-score FORM_FRAUD_5 0.016
-score FOUND_YOU 2.918
+score FBI_MONEY 0.374
+score FBI_SPOOF 1.999
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD 0.001
+score FORM_FRAUD_3 0.001
+score FORM_FRAUD_5 0.001 # force non-zero
+score FOUND_YOU 1.965
score FREEMAIL_DOC_PDF_BCC 2.596
-score FREEMAIL_FORGED_FROMDOMAIN 0.001
-score FROM_IN_TO_AND_SUBJ 0.889
+score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
+score FROM_IN_TO_AND_SUBJ 1.099
score FROM_MISSPACED 0.001
-score FROM_MISSP_FREEMAIL 3.695
+score FROM_MISSP_FREEMAIL 0.001
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 3.496
score FROM_MISSP_REPLYTO 0.001
-score FROM_MISSP_TO_UNDISC 3.196
+score FROM_MISSP_TO_UNDISC 0.001
score FROM_MISSP_USER 0.001
-score FROM_MISSP_XPRIO 0.001
-score FROM_WORDY 2.497
-score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FROM_MISSP_XPRIO 0.001 # force non-zero
+score FROM_WORDY 1.884
+score FSL_CTYPE_WIN1251 0.001
score FSL_HELO_BARE_IP_2 1.498
-score FSL_NEW_HELO_USER 0.248
+score FSL_NEW_HELO_USER 0.001 # force non-zero
score HDRS_LCASE 0.099
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HELO_MISC_IP 0.249
score HK_RANDOM_FROM 0.998
-score HK_SCAM_N15 2.391
-score HK_SCAM_N2 3.496
+score HK_SCAM_N15 2.596
+score HK_SCAM_N2 0.001
score IMG_DIRECT_TO_MX 2.497
-score LIST_PRTL_SAME_USER 0.001
-score LONG_HEX_URI 2.414
+score LIST_PRTL_SAME_USER 0.001 # force non-zero
+score LONG_HEX_URI 2.796
score LONG_IMG_URI 0.552
score LOTS_OF_MONEY 0.001 # force non-zero
score LOTTO_AGENT 1.498
score LOTTO_DEPT 0.001
score MIMEOLE_DIRECT_TO_MX 1.445
-score MONEY_BARRISTER 0.001
-score MONEY_FRAUD_3 2.996
-score MONEY_FRAUD_5 3.197
-score MONEY_FRAUD_8 2.778
-score MONEY_FROM_MISSP 0.001
-score MONEY_LOTTERY 2.497
-score MSGID_NOFQDN1 2.394
-score MSM_PRIO_REPTO 2.497
+score MONEY_FRAUD_3 0.001
+score MONEY_FRAUD_5 0.001
+score MONEY_FRAUD_8 0.001
+score MONEY_LOTTERY 2.599
+score MSGID_NOFQDN1 2.396
+score MSM_PRIO_REPTO 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.052
-score PHP_ORIG_SCRIPT 2.386
-score PP_MIME_FAKE_ASCII_TEXT 0.998
-score RP_MATCHES_RCVD -1.101
-score SPOOFED_FREEM_REPTO 2.497
+score NSL_RCVD_HELO_USER 0.001
+score PHP_ORIG_SCRIPT 2.394
+score PP_MIME_FAKE_ASCII_TEXT 0.408
+score RP_MATCHES_RCVD -1.050
+score SPOOFED_FREEM_REPTO 1.748
score STATIC_XPRIO_OLE 1.997
-score STOCK_LOW_CONTRAST 2.032
-score STYLE_GIBBERISH 2.796
-score THIS_AD 1.054
-score TO_EQ_FM_DIRECT_MX 2.497
+score STOCK_LOW_CONTRAST 1.886
+score STYLE_GIBBERISH 2.396
+score THIS_AD 1.485
+score TO_EQ_FM_DIRECT_MX 2.498
score TO_IN_SUBJ 0.099
score TO_NO_BRKTS_FROM_MSSP 0.001
score TO_NO_BRKTS_HTML_IMG 0.001
-score TO_NO_BRKTS_HTML_ONLY 1.997
-score TO_NO_BRKTS_MSFT 2.497
-score TO_NO_BRKTS_NORDNS_HTML 0.401
+score TO_NO_BRKTS_HTML_ONLY 0.553
+score TO_NO_BRKTS_MSFT 0.001
+score TO_NO_BRKTS_NORDNS_HTML 0.399
score TO_NO_BRKTS_PCNT 2.497
-score TVD_SPACE_ENCODED 2.497
-score TVD_SPACE_ENC_FM_MIME 1.998
-score TVD_SPACE_RATIO_MINFP 2.497
-score URI_GOOGLE_PROXY 0.710
+score TVD_SPACE_ENCODED 0.001 # force non-zero
+score TVD_SPACE_ENC_FM_MIME 0.001
+score TVD_SPACE_RATIO_MINFP 2.498
+score URI_GOOGLE_PROXY 0.001 # force non-zero
score URI_ONLY_MSGID_MALF 0.001
-score URI_PHISH 3.996
-score URI_TRY_3LD 0.510
-score URI_WPADMIN 3.296
+score URI_PHISH 3.995
+score URI_TRY_3LD 0.399
+score URI_TRY_USME 0.001
+score URI_WPADMIN 2.358
+score URI_WP_DIRINDEX 1.411
score URI_WP_HACKED 2.996
-score URI_WP_HACKED_2 1.478
-score XM_PHPMAILER_FORGED 2.232
-score XPRIO 2.248
-score AC_HTML_NONSENSE_TAGS 1.000
+score URI_WP_HACKED_2 1.187
+score XM_PHPMAILER_FORGED 2.397
+score XPRIO 2.247
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -130,7 +129,6 @@ score TW_GIBBERISH_MANY 1.0
score UC_GIBBERISH_OBFU 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
-score URI_WP_DIRINDEX 1.000
score XPRIO_SHORT_SUBJ 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1786555&r1=1786554&r2=1786555&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Sun Mar 12 02:43:28 2017
@@ -1,112 +1,102 @@
-# Using score set 1 logs for revision 1785437 from:
-# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-bb-guenther_fraud.log ham-net-darxus.log ham-net-dwarren.log ham-net-ena.log ham-net-grenier.log ham-net-jarif.log ham-net-kgolding.log ham-net-thendrikx.log ham-net-zmi.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-bb-guenther_fraud.log spam-net-darxus.log spam-net-dwarren.log spam-net-ena.log spam-net-grenier.log spam-net-jarif.log spam-net-kgolding.log spam-net-thendrikx.log spam-net-zmi.log
+# Using score set 1 logs for revision 1786494 from:
+# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-bb-guenther_fraud.log ham-net-darxus.log ham-net-ena.log ham-net-grenier.log ham-net-jarif.log ham-net-kgolding.log ham-net-thendrikx.log ham-net-zmi.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-bb-guenther_fraud.log spam-net-darxus.log spam-net-ena.log spam-net-grenier.log spam-net-jarif.log spam-net-kgolding.log spam-net-thendrikx.log spam-net-zmi.log
-score AC_BR_BONANZA 0.001 # force non-zero
+score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
-score AC_HTML_NONSENSE_TAGS 0.001
-score ADVANCE_FEE_2_NEW_MONEY 0.001
-score ADVANCE_FEE_3_NEW 0.001
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_3_NEW_MONEY 0.001 # force non-zero
-score ADVANCE_FEE_4_NEW 0.001
-score ADVANCE_FEE_5_NEW 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.001 # force non-zero
-score AXB_XM_FORGED_OL2600 1.442
+score ADVANCE_FEE_2_NEW_MONEY 1.999
+score ADVANCE_FEE_3_NEW 3.500
+score ADVANCE_FEE_3_NEW_MONEY 2.700
+score ADVANCE_FEE_4_NEW 2.499
+score ADVANCE_FEE_5_NEW 2.899
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.533
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.755
+score AXB_XM_FORGED_OL2600 2.382
score BODY_EMPTY 1.999
-score BODY_URI_ONLY 0.001 # force non-zero
-score BOGUS_MSM_HDRS 0.001 # force non-zero
-score CANT_SEE_AD 0.797
-score CK_HELO_DYNAMIC_SPLIT_IP 0.001
+score BODY_URI_ONLY 1.000
+score BOGUS_MSM_HDRS 1.352
+score CANT_SEE_AD 1.914
+score CK_HELO_DYNAMIC_SPLIT_IP 0.001 # force non-zero
score CK_HELO_GENERIC 0.249
-score CN_B2B_SPAMMER 0.001
-score COMMENT_GIBBERISH 1.499
-score DATE_IN_FUTURE_96_Q 3.099
-score FBI_MONEY 1.868
-score FBI_SPOOF 1.855
-score FILL_THIS_FORM 0.001 # force non-zero
-score FORM_FRAUD 0.001 # force non-zero
-score FORM_FRAUD_3 0.001
-score FORM_FRAUD_5 0.001
-score FOUND_YOU 2.957
-score FREEMAIL_DOC_PDF_BCC 2.599
+score CN_B2B_SPAMMER 2.299
+score COMMENT_GIBBERISH 1.500
+score DATE_IN_FUTURE_96_Q 3.199
+score FBI_MONEY 1.348
+score FBI_SPOOF 1.000
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 2.499
+score FORM_FRAUD_5 0.001 # force non-zero
+score FOUND_YOU 3.249
+score FREEMAIL_DOC_PDF_BCC 2.499
score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FROM_IN_TO_AND_SUBJ 0.149
-score FROM_MISSPACED 0.001
-score FROM_MISSP_FREEMAIL 0.001
-score FROM_MISSP_MSFT 0.001 # force non-zero
-score FROM_MISSP_PHISH 0.136
-score FROM_MISSP_REPLYTO 0.001 # force non-zero
-score FROM_MISSP_TO_UNDISC 0.001
-score FROM_MISSP_USER 0.001
+score FROM_IN_TO_AND_SUBJ 0.698
+score FROM_MISSPACED 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 3.390
+score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_REPLYTO 0.001
+score FROM_MISSP_TO_UNDISC 3.099
+score FROM_MISSP_USER 0.001 # force non-zero
score FROM_MISSP_XPRIO 0.001
-score FROM_WORDY 0.001
-score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FROM_WORDY 2.499
+score FSL_CTYPE_WIN1251 0.001
score FSL_HELO_BARE_IP_2 1.499
-score FSL_NEW_HELO_USER 0.001
-score HDRS_LCASE 0.099
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HELO_MISC_IP 0.249
+score FSL_NEW_HELO_USER 0.095
+score HDRS_LCASE 0.100
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HELO_MISC_IP 0.250
score HK_RANDOM_FROM 0.999
-score HK_SCAM_N15 2.399
-score HK_SCAM_N2 0.001
+score HK_SCAM_N15 1.083
+score HK_SCAM_N2 2.160
score IMG_DIRECT_TO_MX 2.399
-score LIST_PRTL_SAME_USER 0.278
-score LONG_HEX_URI 2.496
-score LONG_IMG_URI 0.118
+score LIST_PRTL_SAME_USER 0.275
+score LONG_HEX_URI 2.307
+score LONG_IMG_URI 0.099
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.499
+score LOTTO_AGENT 1.500
score LOTTO_DEPT 0.001
-score MIMEOLE_DIRECT_TO_MX 0.125
-score MIME_NO_TEXT 1.999
-score MONEY_BARRISTER 0.001
-score MONEY_FRAUD_3 0.001
-score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 0.001 # force non-zero
-score MONEY_FROM_MISSP 0.001
-score MONEY_LOTTERY 1.766
-score MSGID_NOFQDN1 3.499
+score MIMEOLE_DIRECT_TO_MX 1.999
+score MONEY_FRAUD_3 2.799
+score MONEY_FRAUD_5 2.999
+score MONEY_FRAUD_8 1.300
+score MONEY_LOTTERY 1.174
+score MSGID_NOFQDN1 3.300
score MSM_PRIO_REPTO 2.499
-score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.001
-score OBFU_TEXT_ATTACH 0.001
-score PHP_ORIG_SCRIPT 1.466
-score PP_MIME_FAKE_ASCII_TEXT 0.367
-score RCVD_IN_MSPIKE_H2 -0.001
-score RCVD_IN_MSPIKE_L3 0.001
-score RCVD_IN_MSPIKE_L4 0.001
-score RCVD_IN_MSPIKE_L5 0.001
-score RCVD_IN_MSPIKE_ZBI 2.299
-score RCVD_IN_SORBS_WEB 2.035
-score RP_MATCHES_RCVD -0.001
-score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 1.737
-score STATIC_XPRIO_OLE 0.997
-score STOCK_LOW_CONTRAST 2.500
-score STYLE_GIBBERISH 3.499
-score THIS_AD 2.100
+score NSL_RCVD_FROM_USER 0.586
+score NSL_RCVD_HELO_USER 3.013
+score PHP_ORIG_SCRIPT 2.270
+score PP_MIME_FAKE_ASCII_TEXT 0.001
+score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score RCVD_IN_MSPIKE_L3 0.372
+score RCVD_IN_MSPIKE_L4 2.174
+score RCVD_IN_MSPIKE_L5 2.399
+score RP_MATCHES_RCVD -0.349
+score SHARE_50_50 2.159
+score SPOOFED_FREEM_REPTO 1.957
+score STATIC_XPRIO_OLE 1.999
+score STOCK_LOW_CONTRAST 2.348
+score STYLE_GIBBERISH 3.094
+score THIS_AD 2.009
score TO_EQ_FM_DIRECT_MX 2.499
-score TO_IN_SUBJ 0.100
+score TO_IN_SUBJ 0.099
score TO_NO_BRKTS_FROM_MSSP 0.001
-score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_NO_BRKTS_HTML_IMG 1.919
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 0.001 # force non-zero
+score TO_NO_BRKTS_MSFT 2.499
score TO_NO_BRKTS_NORDNS_HTML 0.650
-score TO_NO_BRKTS_PCNT 0.960
-score TVD_SPACE_ENCODED 2.500
-score TVD_SPACE_ENC_FM_MIME 0.001
+score TO_NO_BRKTS_PCNT 2.499
+score TVD_SPACE_ENCODED 2.499
+score TVD_SPACE_ENC_FM_MIME 1.999
score TVD_SPACE_RATIO_MINFP 2.499
-score URI_DQ_UNSUB 2.299
-score URI_GOOGLE_PROXY 2.000
-score URI_ONLY_MSGID_MALF 1.999
+score URI_GOOGLE_PROXY 2.399
+score URI_ONLY_MSGID_MALF 0.001
score URI_PHISH 3.999
score URI_TRY_3LD 0.001
-score URI_WPADMIN 2.599
-score URI_WP_DIRINDEX 2.999
+score URI_WPADMIN 3.199
score URI_WP_HACKED 2.999
-score URI_WP_HACKED_2 1.756
-score XM_PHPMAILER_FORGED 2.399
+score URI_WP_HACKED_2 0.863
+score XM_PHPMAILER_FORGED 2.299
score XPRIO 2.249
+score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -128,6 +118,7 @@ score HEXHASH_WORD 1.0
score HTML_OFF_PAGE 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
+score MIME_NO_TEXT 1.000
score PHP_NOVER_MUA 1.000
score PHP_SCRIPT_MUA 1.000
score PP_TOO_MUCH_UNICODE02 0.500
@@ -140,10 +131,12 @@ score RCVD_IN_MSPIKE_H3 -0.
score RCVD_IN_MSPIKE_H4 -0.010
score RCVD_IN_MSPIKE_H5 -1.000
score RCVD_IN_MSPIKE_WL -0.010
+score SPOOFED_FREEM_REPTO_CHN 1.000
score STOCK_TIP 1.000
score SYSADMIN 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
+score URI_WP_DIRINDEX 1.000
score XPRIO_SHORT_SUBJ 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1786555&r1=1786554&r2=1786555&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Sun Mar 12 02:43:28 2017
@@ -1,100 +1,99 @@
# Using score set 0 logs for revision 1786298 from:
-# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-bb-traps.log ham-darxus.log ham-ena.log ham-grenier.log ham-jarif.log ham-kgolding.log ham-thendrikx.log ham-zmi.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-bb-traps.log spam-darxus.log spam-ena.log spam-grenier.log spam-jarif.log spam-kgolding.log spam-thendrikx.log spam-zmi.log
+# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-axb-ninja.log ham-bb-traps.log ham-darxus.log ham-dwarren.log ham-ena.log ham-grenier.log ham-jarif.log ham-kgolding.log ham-thendrikx.log ham-zmi.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-axb-ninja.log spam-bb-traps.log spam-darxus.log spam-dwarren.log spam-ena.log spam-grenier.log spam-jarif.log spam-kgolding.log spam-thendrikx.log spam-zmi.log
-score AC_BR_BONANZA 0.001
+score AC_BR_BONANZA 0.001 # force non-zero
score AC_DIV_BONANZA 0.001
-score ADVANCE_FEE_2_NEW_MONEY 1.997
-score ADVANCE_FEE_3_NEW 3.496
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.598
-score ADVANCE_FEE_3_NEW_MONEY 2.896
+score AC_HTML_NONSENSE_TAGS 0.001
+score ADVANCE_FEE_2_NEW_MONEY 0.001
+score ADVANCE_FEE_3_NEW 0.001 # force non-zero
+score ADVANCE_FEE_3_NEW_MONEY 0.583
score ADVANCE_FEE_4_NEW 2.596
-score ADVANCE_FEE_5_NEW 2.996
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.750
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.281
-score AXB_XM_FORGED_OL2600 0.806
-score BODY_EMPTY 1.997
-score BODY_URI_ONLY 0.998
-score BOGUS_MSM_HDRS 1.898
+score ADVANCE_FEE_5_NEW 0.001
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.001
+score AXB_XM_FORGED_OL2600 1.419
+score BODY_EMPTY 0.099
+score BODY_URI_ONLY 0.001 # force non-zero
+score BOGUS_MSM_HDRS 0.001 # force non-zero
score CANT_SEE_AD 2.996
score CK_HELO_DYNAMIC_SPLIT_IP 1.498
-score CK_HELO_GENERIC 0.249
-score COMMENT_GIBBERISH 1.498
+score CK_HELO_GENERIC 0.248
+score CN_B2B_SPAMMER 0.001
+score COMMENT_GIBBERISH 1.499
score DATE_IN_FUTURE_96_Q 3.296
-score FBI_MONEY 0.521
-score FBI_SPOOF 1.422
-score FILL_THIS_FORM 1.198
-score FORM_FRAUD 0.998
-score FORM_FRAUD_3 2.696
-score FORM_FRAUD_5 0.016
-score FOUND_YOU 2.918
+score FBI_MONEY 0.374
+score FBI_SPOOF 1.999
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD 0.001
+score FORM_FRAUD_3 0.001
+score FORM_FRAUD_5 0.001 # force non-zero
+score FOUND_YOU 1.965
score FREEMAIL_DOC_PDF_BCC 2.596
-score FREEMAIL_FORGED_FROMDOMAIN 0.001
-score FROM_IN_TO_AND_SUBJ 0.889
+score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
+score FROM_IN_TO_AND_SUBJ 1.099
score FROM_MISSPACED 0.001
-score FROM_MISSP_FREEMAIL 3.695
+score FROM_MISSP_FREEMAIL 0.001
score FROM_MISSP_MSFT 0.001
-score FROM_MISSP_PHISH 3.496
score FROM_MISSP_REPLYTO 0.001
-score FROM_MISSP_TO_UNDISC 3.196
+score FROM_MISSP_TO_UNDISC 0.001
score FROM_MISSP_USER 0.001
-score FROM_MISSP_XPRIO 0.001
-score FROM_WORDY 2.497
-score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FROM_MISSP_XPRIO 0.001 # force non-zero
+score FROM_WORDY 1.884
+score FSL_CTYPE_WIN1251 0.001
score FSL_HELO_BARE_IP_2 1.498
-score FSL_NEW_HELO_USER 0.248
+score FSL_NEW_HELO_USER 0.001 # force non-zero
score HDRS_LCASE 0.099
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HELO_MISC_IP 0.249
score HK_RANDOM_FROM 0.998
-score HK_SCAM_N15 2.391
-score HK_SCAM_N2 3.496
+score HK_SCAM_N15 2.596
+score HK_SCAM_N2 0.001
score IMG_DIRECT_TO_MX 2.497
-score LIST_PRTL_SAME_USER 0.001
-score LONG_HEX_URI 2.414
+score LIST_PRTL_SAME_USER 0.001 # force non-zero
+score LONG_HEX_URI 2.796
score LONG_IMG_URI 0.552
score LOTS_OF_MONEY 0.001 # force non-zero
score LOTTO_AGENT 1.498
score LOTTO_DEPT 0.001
score MIMEOLE_DIRECT_TO_MX 1.445
-score MONEY_BARRISTER 0.001
-score MONEY_FRAUD_3 2.996
-score MONEY_FRAUD_5 3.197
-score MONEY_FRAUD_8 2.778
-score MONEY_FROM_MISSP 0.001
-score MONEY_LOTTERY 2.497
-score MSGID_NOFQDN1 2.394
-score MSM_PRIO_REPTO 2.497
+score MONEY_FRAUD_3 0.001
+score MONEY_FRAUD_5 0.001
+score MONEY_FRAUD_8 0.001
+score MONEY_LOTTERY 2.599
+score MSGID_NOFQDN1 2.396
+score MSM_PRIO_REPTO 0.001
score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.052
-score PHP_ORIG_SCRIPT 2.386
-score PP_MIME_FAKE_ASCII_TEXT 0.998
-score RP_MATCHES_RCVD -1.101
-score SPOOFED_FREEM_REPTO 2.497
+score NSL_RCVD_HELO_USER 0.001
+score PHP_ORIG_SCRIPT 2.394
+score PP_MIME_FAKE_ASCII_TEXT 0.408
+score RP_MATCHES_RCVD -1.050
+score SPOOFED_FREEM_REPTO 1.748
score STATIC_XPRIO_OLE 1.997
-score STOCK_LOW_CONTRAST 2.032
-score STYLE_GIBBERISH 2.796
-score THIS_AD 1.054
-score TO_EQ_FM_DIRECT_MX 2.497
+score STOCK_LOW_CONTRAST 1.886
+score STYLE_GIBBERISH 2.396
+score THIS_AD 1.485
+score TO_EQ_FM_DIRECT_MX 2.498
score TO_IN_SUBJ 0.099
score TO_NO_BRKTS_FROM_MSSP 0.001
score TO_NO_BRKTS_HTML_IMG 0.001
-score TO_NO_BRKTS_HTML_ONLY 1.997
-score TO_NO_BRKTS_MSFT 2.497
-score TO_NO_BRKTS_NORDNS_HTML 0.401
+score TO_NO_BRKTS_HTML_ONLY 0.553
+score TO_NO_BRKTS_MSFT 0.001
+score TO_NO_BRKTS_NORDNS_HTML 0.399
score TO_NO_BRKTS_PCNT 2.497
-score TVD_SPACE_ENCODED 2.497
-score TVD_SPACE_ENC_FM_MIME 1.998
-score TVD_SPACE_RATIO_MINFP 2.497
-score URI_GOOGLE_PROXY 0.710
+score TVD_SPACE_ENCODED 0.001 # force non-zero
+score TVD_SPACE_ENC_FM_MIME 0.001
+score TVD_SPACE_RATIO_MINFP 2.498
+score URI_GOOGLE_PROXY 0.001 # force non-zero
score URI_ONLY_MSGID_MALF 0.001
-score URI_PHISH 3.996
-score URI_TRY_3LD 0.510
-score URI_WPADMIN 3.296
+score URI_PHISH 3.995
+score URI_TRY_3LD 0.399
+score URI_TRY_USME 0.001
+score URI_WPADMIN 2.358
+score URI_WP_DIRINDEX 1.411
score URI_WP_HACKED 2.996
-score URI_WP_HACKED_2 1.478
-score XM_PHPMAILER_FORGED 2.232
-score XPRIO 2.248
-score AC_HTML_NONSENSE_TAGS 1.000
+score URI_WP_HACKED_2 1.187
+score XM_PHPMAILER_FORGED 2.397
+score XPRIO 2.247
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -130,7 +129,6 @@ score TW_GIBBERISH_MANY 1.0
score UC_GIBBERISH_OBFU 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
-score URI_WP_DIRINDEX 1.000
score XPRIO_SHORT_SUBJ 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1786555&r1=1786554&r2=1786555&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Sun Mar 12 02:43:28 2017
@@ -1,112 +1,102 @@
-# Using score set 1 logs for revision 1785437 from:
-# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-bb-guenther_fraud.log ham-net-darxus.log ham-net-dwarren.log ham-net-ena.log ham-net-grenier.log ham-net-jarif.log ham-net-kgolding.log ham-net-thendrikx.log ham-net-zmi.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-bb-guenther_fraud.log spam-net-darxus.log spam-net-dwarren.log spam-net-ena.log spam-net-grenier.log spam-net-jarif.log spam-net-kgolding.log spam-net-thendrikx.log spam-net-zmi.log
+# Using score set 1 logs for revision 1786494 from:
+# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-axb-ninja.log ham-net-bb-guenther_fraud.log ham-net-darxus.log ham-net-ena.log ham-net-grenier.log ham-net-jarif.log ham-net-kgolding.log ham-net-thendrikx.log ham-net-zmi.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-axb-ninja.log spam-net-bb-guenther_fraud.log spam-net-darxus.log spam-net-ena.log spam-net-grenier.log spam-net-jarif.log spam-net-kgolding.log spam-net-thendrikx.log spam-net-zmi.log
-score AC_BR_BONANZA 0.001 # force non-zero
+score AC_BR_BONANZA 0.001
score AC_DIV_BONANZA 0.001
-score AC_HTML_NONSENSE_TAGS 0.001
-score ADVANCE_FEE_2_NEW_MONEY 0.001
-score ADVANCE_FEE_3_NEW 0.001
-score ADVANCE_FEE_3_NEW_FRM_MNY 0.001
-score ADVANCE_FEE_3_NEW_MONEY 0.001 # force non-zero
-score ADVANCE_FEE_4_NEW 0.001
-score ADVANCE_FEE_5_NEW 0.001
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 0.001 # force non-zero
-score AXB_XM_FORGED_OL2600 1.442
+score ADVANCE_FEE_2_NEW_MONEY 1.999
+score ADVANCE_FEE_3_NEW 3.500
+score ADVANCE_FEE_3_NEW_MONEY 2.700
+score ADVANCE_FEE_4_NEW 2.499
+score ADVANCE_FEE_5_NEW 2.899
+score AXB_XMAILER_MIMEOLE_OL_024C2 1.533
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.755
+score AXB_XM_FORGED_OL2600 2.382
score BODY_EMPTY 1.999
-score BODY_URI_ONLY 0.001 # force non-zero
-score BOGUS_MSM_HDRS 0.001 # force non-zero
-score CANT_SEE_AD 0.797
-score CK_HELO_DYNAMIC_SPLIT_IP 0.001
+score BODY_URI_ONLY 1.000
+score BOGUS_MSM_HDRS 1.352
+score CANT_SEE_AD 1.914
+score CK_HELO_DYNAMIC_SPLIT_IP 0.001 # force non-zero
score CK_HELO_GENERIC 0.249
-score CN_B2B_SPAMMER 0.001
-score COMMENT_GIBBERISH 1.499
-score DATE_IN_FUTURE_96_Q 3.099
-score FBI_MONEY 1.868
-score FBI_SPOOF 1.855
-score FILL_THIS_FORM 0.001 # force non-zero
-score FORM_FRAUD 0.001 # force non-zero
-score FORM_FRAUD_3 0.001
-score FORM_FRAUD_5 0.001
-score FOUND_YOU 2.957
-score FREEMAIL_DOC_PDF_BCC 2.599
+score CN_B2B_SPAMMER 2.299
+score COMMENT_GIBBERISH 1.500
+score DATE_IN_FUTURE_96_Q 3.199
+score FBI_MONEY 1.348
+score FBI_SPOOF 1.000
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD 0.999
+score FORM_FRAUD_3 2.499
+score FORM_FRAUD_5 0.001 # force non-zero
+score FOUND_YOU 3.249
+score FREEMAIL_DOC_PDF_BCC 2.499
score FREEMAIL_FORGED_FROMDOMAIN 0.249
-score FROM_IN_TO_AND_SUBJ 0.149
-score FROM_MISSPACED 0.001
-score FROM_MISSP_FREEMAIL 0.001
-score FROM_MISSP_MSFT 0.001 # force non-zero
-score FROM_MISSP_PHISH 0.136
-score FROM_MISSP_REPLYTO 0.001 # force non-zero
-score FROM_MISSP_TO_UNDISC 0.001
-score FROM_MISSP_USER 0.001
+score FROM_IN_TO_AND_SUBJ 0.698
+score FROM_MISSPACED 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 3.390
+score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_REPLYTO 0.001
+score FROM_MISSP_TO_UNDISC 3.099
+score FROM_MISSP_USER 0.001 # force non-zero
score FROM_MISSP_XPRIO 0.001
-score FROM_WORDY 0.001
-score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FROM_WORDY 2.499
+score FSL_CTYPE_WIN1251 0.001
score FSL_HELO_BARE_IP_2 1.499
-score FSL_NEW_HELO_USER 0.001
-score HDRS_LCASE 0.099
-score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HELO_MISC_IP 0.249
+score FSL_NEW_HELO_USER 0.095
+score HDRS_LCASE 0.100
+score HEADER_FROM_DIFFERENT_DOMAINS 0.001
+score HELO_MISC_IP 0.250
score HK_RANDOM_FROM 0.999
-score HK_SCAM_N15 2.399
-score HK_SCAM_N2 0.001
+score HK_SCAM_N15 1.083
+score HK_SCAM_N2 2.160
score IMG_DIRECT_TO_MX 2.399
-score LIST_PRTL_SAME_USER 0.278
-score LONG_HEX_URI 2.496
-score LONG_IMG_URI 0.118
+score LIST_PRTL_SAME_USER 0.275
+score LONG_HEX_URI 2.307
+score LONG_IMG_URI 0.099
score LOTS_OF_MONEY 0.010
-score LOTTO_AGENT 1.499
+score LOTTO_AGENT 1.500
score LOTTO_DEPT 0.001
-score MIMEOLE_DIRECT_TO_MX 0.125
-score MIME_NO_TEXT 1.999
-score MONEY_BARRISTER 0.001
-score MONEY_FRAUD_3 0.001
-score MONEY_FRAUD_5 0.001
-score MONEY_FRAUD_8 0.001 # force non-zero
-score MONEY_FROM_MISSP 0.001
-score MONEY_LOTTERY 1.766
-score MSGID_NOFQDN1 3.499
+score MIMEOLE_DIRECT_TO_MX 1.999
+score MONEY_FRAUD_3 2.799
+score MONEY_FRAUD_5 2.999
+score MONEY_FRAUD_8 1.300
+score MONEY_LOTTERY 1.174
+score MSGID_NOFQDN1 3.300
score MSM_PRIO_REPTO 2.499
-score NSL_RCVD_FROM_USER 0.001
-score NSL_RCVD_HELO_USER 0.001
-score OBFU_TEXT_ATTACH 0.001
-score PHP_ORIG_SCRIPT 1.466
-score PP_MIME_FAKE_ASCII_TEXT 0.367
-score RCVD_IN_MSPIKE_H2 -0.001
-score RCVD_IN_MSPIKE_L3 0.001
-score RCVD_IN_MSPIKE_L4 0.001
-score RCVD_IN_MSPIKE_L5 0.001
-score RCVD_IN_MSPIKE_ZBI 2.299
-score RCVD_IN_SORBS_WEB 2.035
-score RP_MATCHES_RCVD -0.001
-score SPOOFED_FREEM_REPTO 2.499
-score SPOOFED_FREEM_REPTO_CHN 1.737
-score STATIC_XPRIO_OLE 0.997
-score STOCK_LOW_CONTRAST 2.500
-score STYLE_GIBBERISH 3.499
-score THIS_AD 2.100
+score NSL_RCVD_FROM_USER 0.586
+score NSL_RCVD_HELO_USER 3.013
+score PHP_ORIG_SCRIPT 2.270
+score PP_MIME_FAKE_ASCII_TEXT 0.001
+score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
+score RCVD_IN_MSPIKE_L3 0.372
+score RCVD_IN_MSPIKE_L4 2.174
+score RCVD_IN_MSPIKE_L5 2.399
+score RP_MATCHES_RCVD -0.349
+score SHARE_50_50 2.159
+score SPOOFED_FREEM_REPTO 1.957
+score STATIC_XPRIO_OLE 1.999
+score STOCK_LOW_CONTRAST 2.348
+score STYLE_GIBBERISH 3.094
+score THIS_AD 2.009
score TO_EQ_FM_DIRECT_MX 2.499
-score TO_IN_SUBJ 0.100
+score TO_IN_SUBJ 0.099
score TO_NO_BRKTS_FROM_MSSP 0.001
-score TO_NO_BRKTS_HTML_IMG 1.999
+score TO_NO_BRKTS_HTML_IMG 1.919
score TO_NO_BRKTS_HTML_ONLY 1.999
-score TO_NO_BRKTS_MSFT 0.001 # force non-zero
+score TO_NO_BRKTS_MSFT 2.499
score TO_NO_BRKTS_NORDNS_HTML 0.650
-score TO_NO_BRKTS_PCNT 0.960
-score TVD_SPACE_ENCODED 2.500
-score TVD_SPACE_ENC_FM_MIME 0.001
+score TO_NO_BRKTS_PCNT 2.499
+score TVD_SPACE_ENCODED 2.499
+score TVD_SPACE_ENC_FM_MIME 1.999
score TVD_SPACE_RATIO_MINFP 2.499
-score URI_DQ_UNSUB 2.299
-score URI_GOOGLE_PROXY 2.000
-score URI_ONLY_MSGID_MALF 1.999
+score URI_GOOGLE_PROXY 2.399
+score URI_ONLY_MSGID_MALF 0.001
score URI_PHISH 3.999
score URI_TRY_3LD 0.001
-score URI_WPADMIN 2.599
-score URI_WP_DIRINDEX 2.999
+score URI_WPADMIN 3.199
score URI_WP_HACKED 2.999
-score URI_WP_HACKED_2 1.756
-score XM_PHPMAILER_FORGED 2.399
+score URI_WP_HACKED_2 0.863
+score XM_PHPMAILER_FORGED 2.299
score XPRIO 2.249
+score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
score AC_SPAMMY_URI_PATTERNS10 1.000
score AC_SPAMMY_URI_PATTERNS11 1.000
@@ -128,6 +118,7 @@ score HEXHASH_WORD 1.0
score HTML_OFF_PAGE 1.000
score LIST_PRTL_PUMPDUMP 1.000
score LUCRATIVE 1.000
+score MIME_NO_TEXT 1.000
score PHP_NOVER_MUA 1.000
score PHP_SCRIPT_MUA 1.000
score PP_TOO_MUCH_UNICODE02 0.500
@@ -140,10 +131,12 @@ score RCVD_IN_MSPIKE_H3 -0.
score RCVD_IN_MSPIKE_H4 -0.010
score RCVD_IN_MSPIKE_H5 -1.000
score RCVD_IN_MSPIKE_WL -0.010
+score SPOOFED_FREEM_REPTO_CHN 1.000
score STOCK_TIP 1.000
score SYSADMIN 1.000
score TW_GIBBERISH_MANY 1.000
score UC_GIBBERISH_OBFU 1.000
score URI_DATA 1.000
score URI_OPTOUT_3LD 1.000
+score URI_WP_DIRINDEX 1.000
score XPRIO_SHORT_SUBJ 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1786555&r1=1786554&r2=1786555&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Sun Mar 12 02:43:28 2017
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 123899 34.347% (97.498% of non-spam corpus)
-# Correctly spam: 171135 47.441% (73.243% of spam corpus)
-# False positives: 3179 0.881% (2.502% of nonspam, 171430 weighted)
-# False negatives: 62519 17.331% (26.757% of spam, 195330 weighted)
-# Average score for spam: 8.2 nonspam: 0.9
-# Average for false-pos: 5.9 false-neg: 3.1
-# TOTAL: 360732 100.00%
+# Correctly non-spam: 131108 35.431% (96.248% of non-spam corpus)
+# Correctly spam: 169974 45.934% (72.695% of spam corpus)
+# False positives: 5111 1.381% (3.752% of nonspam, 295941 weighted)
+# False negatives: 63845 17.254% (27.305% of spam, 198905 weighted)
+# Average score for spam: 8.0 nonspam: 1.1
+# Average for false-pos: 6.7 false-neg: 3.1
+# TOTAL: 370038 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 15503 97.20%
-# Correctly spam: 21324 72.88%
-# False positives: 447 2.80%
-# False negatives: 7934 27.12%
-# TCR(l=50): 0.966121 SpamRecall: 72.883% SpamPrec: 97.947%
+# Correctly non-spam: 16351 95.87%
+# Correctly spam: 21216 72.47%
+# False positives: 704 4.13%
+# False negatives: 8059 27.53%
+# TCR(l=50): 0.676738 SpamRecall: 72.471% SpamPrec: 96.788%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 123497 97.18%
-# Correctly spam: 107807 46.14%
-# False positives: 3581 2.82%
-# False negatives: 125847 53.86%
-# TCR(l=50): 0.766337 SpamRecall: 46.140% SpamPrec: 96.785%
+# Correctly non-spam: 130854 96.06%
+# Correctly spam: 107844 46.12%
+# False positives: 5365 3.94%
+# False negatives: 125975 53.88%
+# TCR(l=50): 0.593111 SpamRecall: 46.123% SpamPrec: 95.261%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 15467 96.97%
-# Correctly spam: 13511 46.18%
-# False positives: 483 3.03%
-# False negatives: 15747 53.82%
-# TCR(l=50): 0.733338 SpamRecall: 46.179% SpamPrec: 96.549%
+# Correctly non-spam: 16335 95.78%
+# Correctly spam: 13514 46.16%
+# False positives: 720 4.22%
+# False negatives: 15761 53.84%
+# TCR(l=50): 0.565580 SpamRecall: 46.162% SpamPrec: 94.942%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1786555&r1=1786554&r2=1786555&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Sun Mar 12 02:43:28 2017
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 128345 49.281% (98.910% of non-spam corpus)
-# Correctly spam: 98077 37.659% (75.054% of spam corpus)
-# False positives: 1414 0.543% (1.090% of nonspam, 115850 weighted)
-# False negatives: 32598 12.517% (24.946% of spam, 72744 weighted)
-# Average score for spam: 9.4 nonspam: 0.2
-# Average for false-pos: 8.1 false-neg: 2.2
-# TOTAL: 260434 100.00%
+# Correctly non-spam: 126834 33.867% (99.725% of non-spam corpus)
+# Correctly spam: 209238 55.870% (84.600% of spam corpus)
+# False positives: 350 0.093% (0.275% of nonspam, 44908 weighted)
+# False negatives: 38088 10.170% (15.400% of spam, 95420 weighted)
+# Average score for spam: 11.3 nonspam: 0.0
+# Average for false-pos: 6.6 false-neg: 2.5
+# TOTAL: 374510 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 16118 98.90%
-# Correctly spam: 12276 74.87%
-# False positives: 180 1.10%
-# False negatives: 4121 25.13%
-# TCR(l=50): 1.249676 SpamRecall: 74.867% SpamPrec: 98.555%
+# Correctly non-spam: 15927 99.79%
+# Correctly spam: 26178 84.82%
+# False positives: 34 0.21%
+# False negatives: 4686 15.18%
+# TCR(l=50): 4.833072 SpamRecall: 84.817% SpamPrec: 99.870%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 128517 99.04%
-# Correctly spam: 63346 48.48%
-# False positives: 1242 0.96%
-# False negatives: 67329 51.52%
-# TCR(l=50): 1.009627 SpamRecall: 48.476% SpamPrec: 98.077%
+# Correctly non-spam: 126884 99.76%
+# Correctly spam: 147955 59.82%
+# False positives: 300 0.24%
+# False negatives: 99371 40.18%
+# TCR(l=50): 2.162489 SpamRecall: 59.822% SpamPrec: 99.798%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 16142 99.04%
-# Correctly spam: 7872 48.01%
-# False positives: 156 0.96%
-# False negatives: 8525 51.99%
-# TCR(l=50): 1.004410 SpamRecall: 48.009% SpamPrec: 98.057%
+# Correctly non-spam: 15931 99.81%
+# Correctly spam: 18633 60.37%
+# False positives: 30 0.19%
+# False negatives: 12231 39.63%
+# TCR(l=50): 2.247761 SpamRecall: 60.371% SpamPrec: 99.839%