You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by Justin Mason <jm...@jmason.org> on 2006/10/29 18:24:38 UTC

ham check: Chris Thielen

hey chris -- could you check these:

.  2
/home/sone/files/masscheck_request//ham-recent/1113537541.11162_2.ns1:2,S
BAYES_50,HTML_MESSAGE,NORMAL_HTTP_TO_IP,T_HTML_FONT_SIZE_TINY_1,T__FRAUD_DBI,T__FRAUD_DBI_1,T__FRAUD_DBI_2,T__FRAUD_DBI_3,T__FRAUD_DBI_4,T__FRAUD_DBI_5,T__FRAUD_DBI_7,URIBL_PH_SURBL,US_DOLLARS_3,__COMMENT_EXISTS,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__DNS_FROM_RFC_ABUSE,__FRAUD_DBI,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HTML_LINK_IMAGE,__KAM_NUMBER2,__LIST_MAIL,__LIST_UNSUB,__LOCAL_PP_NONPPURL,__MIME_HTML,__MIME_VERSION,__NONEMPTY_BODY,__RFC_IGNORANT_ENVFROM,__SANE_MSGID,__TAG_EXISTS_BODY,__TAG_EXISTS_CENTER,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TOCC_EXISTS,__UNUSABLE_MSGID
time=1113537541,bayes=0.5,scantime=6,format=f,reuse=no
.  2
/home/sone/files/masscheck_request//ham-recent/1119655820.8618_2.ns1:2,S
BAYES_50,HTML_MESSAGE,NORMAL_HTTP_TO_IP,T_HTML_FONT_SIZE_TINY_1,T__FRAUD_DBI,T__FRAUD_DBI_1,T__FRAUD_DBI_2,T__FRAUD_DBI_3,T__FRAUD_DBI_4,T__FRAUD_DBI_5,T__FRAUD_DBI_7,URIBL_PH_SURBL,US_DOLLARS_3,__COMMENT_EXISTS,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__DNS_FROM_RFC_ABUSE,__FRAUD_DBI,__FRAUD_PTS,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HTML_LINK_IMAGE,__KAM_NUMBER2,__LIST_MAIL,__LIST_UNSUB,__LOCAL_PP_NONPPURL,__MIME_HTML,__MIME_VERSION,__NONEMPTY_BODY,__RFC_IGNORANT_ENVFROM,__SANE_MSGID,__TAG_EXISTS_BODY,__TAG_EXISTS_CENTER,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TOCC_EXISTS,__UNUSABLE_MSGID
time=1119655820,bayes=0.500000213569362,scantime=6,format=f,reuse=no
Y 11
/home/sone/files/masscheck_request//ham-recent/1151805249.2072_2.ns1.sandgnat.com:2,S
BAYES_50,HTML_MESSAGE,HTTP_ESCAPED_HOST,MIME_HTML_ONLY,TVD_PH_SEC,TVD_PH_SUBJ_META,TVD_PH_SUBJ_META_ALL,T_TVD_PH_BODY_ACCOUNTS_PRE,T_TVD_PH_BODY_META_ALL,T_TVD_PH_SUBJ_ACCOUNTS_PRE,T_URIBL_BLACK_OVERLAP,URIBL_BLACK,URIBL_OB_SURBL,URIBL_PH_SURBL,URI_HEX,__COMMENT_EXISTS,__CT,__CTE,__CTYPE_HTML,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HTML_LINK_IMAGE,__KAM_NUMBER2,__LOCAL_PP_NONPPURL,__MIME_HTML,__MIME_QP,__MIME_VERSION,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SANE_MSGID,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TOCC_EXISTS,__TVD_PH_SUBJ_38
time=1151805249,bayes=0.459109357547369,scantime=5,format=f,reuse=no


showing up as FPs for PH_SURBL.  the last in particular looks
iffy.

--j.