You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by sp...@apache.org on 2014/07/27 04:35:48 UTC
svn commit: r1613747 - in /spamassassin/trunk/rulesrc/scores: 72_scores.cf
scores-set0 scores-set1 scores-set2 scores-set3 stats-set0 stats-set1
Author: spamassassin_role
Date: Sun Jul 27 02:35:48 2014
New Revision: 1613747
URL: http://svn.apache.org/r1613747
Log:
updated scores for revision 1613581 active rules added since last mass-check
Modified:
spamassassin/trunk/rulesrc/scores/72_scores.cf
spamassassin/trunk/rulesrc/scores/scores-set0
spamassassin/trunk/rulesrc/scores/scores-set1
spamassassin/trunk/rulesrc/scores/scores-set2
spamassassin/trunk/rulesrc/scores/scores-set3
spamassassin/trunk/rulesrc/scores/stats-set0
spamassassin/trunk/rulesrc/scores/stats-set1
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1613747&r1=1613746&r2=1613747&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Sun Jul 27 02:35:48 2014
@@ -7,105 +7,111 @@ score AC_SPAMMY_URI_PATTERNS11
score AC_SPAMMY_URI_PATTERNS12 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS2 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS3 1.000 1.000 1.000 1.000
-score AC_SPAMMY_URI_PATTERNS4 3.721 1.638 3.721 1.638
+score AC_SPAMMY_URI_PATTERNS4 2.954 1.682 2.954 1.682
score AC_SPAMMY_URI_PATTERNS8 1.000 1.000 1.000 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000 1.000 1.000 1.000
-score ADMAIL 2.899 2.800 2.899 2.800
-score ADVANCE_FEE_2_NEW_FORM 1.999 1.608 1.999 1.608
-score ADVANCE_FEE_2_NEW_FRM_MNY 2.499 2.499 2.499 2.499
-score ADVANCE_FEE_2_NEW_MONEY 1.999 2.000 1.999 2.000
-score ADVANCE_FEE_3_NEW 2.600 3.500 2.600 3.500
-score ADVANCE_FEE_3_NEW_FORM 0.207 0.835 0.207 0.835
-score ADVANCE_FEE_3_NEW_FRM_MNY 3.123 2.790 3.123 2.790
-score ADVANCE_FEE_3_NEW_MONEY 2.856 2.672 2.856 2.672
-score ADVANCE_FEE_4_NEW 0.540 1.362 0.540 1.362
-score ADVANCE_FEE_4_NEW_FORM 0.001 0.165 0.001 0.165
-score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 1.958 0.001 1.958
-score ADVANCE_FEE_4_NEW_MONEY 0.001 2.743 0.001 2.743
-score ADVANCE_FEE_5_NEW 1.447 0.841 1.447 0.841
-score ADVANCE_FEE_5_NEW_FORM 0.999 0.032 0.999 0.032
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.471 1.727 0.471 1.727
-score ADVANCE_FEE_5_NEW_MONEY 0.235 0.472 0.235 0.472
-score AD_PREFS 0.001 1.799 0.001 1.799
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.489 1.008 0.489 1.008
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.619 1.987 2.619 1.987
-score BITLY_URI 2.250 2.249 2.250 2.249
+score ADMAIL 2.800 2.699 2.800 2.699
+score ADVANCE_FEE_2_NEW_FORM 1.000 1.000 1.000 1.000
+score ADVANCE_FEE_2_NEW_FRM_MNY 2.499 2.468 2.499 2.468
+score ADVANCE_FEE_2_NEW_MONEY 1.999 1.999 1.999 1.999
+score ADVANCE_FEE_3_NEW 2.600 3.499 2.600 3.499
+score ADVANCE_FEE_3_NEW_FORM 2.027 2.082 2.027 2.082
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.766 2.261 0.766 2.261
+score ADVANCE_FEE_3_NEW_MONEY 1.654 0.501 1.654 0.501
+score ADVANCE_FEE_4_NEW 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_4_NEW_FORM 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.001 0.001 0.001 0.001
+score ADVANCE_FEE_5_NEW 0.001 0.813 0.001 0.813
+score ADVANCE_FEE_5_NEW_FORM 0.001 0.518 0.001 0.518
+score ADVANCE_FEE_5_NEW_FRM_MNY 2.601 2.329 2.601 2.329
+score ADVANCE_FEE_5_NEW_MONEY 1.147 0.553 1.147 0.553
+score AD_PREFS 1.699 1.799 1.699 1.799
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 0.001 0.001 0.001
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.636 1.698 2.636 1.698
+score AXB_X_AOL_SEZ_S 2.601 2.900 2.601 2.900
score CANT_SEE_AD 1.000 1.000 1.000 1.000
-score CK_HELO_DYNAMIC_SPLIT_IP 1.499 1.047 1.499 1.047
-score CK_HELO_GENERIC 0.250 0.250 0.250 0.250
-score COMMENT_GIBBERISH 1.499 1.499 1.499 1.499
-score DEAR_BENEFICIARY 3.236 3.157 3.236 3.157
-score EMAIL_URI_PHISH 1.000 3.999 1.000 3.999
-score FBI_MONEY 1.999 1.525 1.999 1.525
-score FBI_SPOOF 0.430 1.803 0.430 1.803
-score FILL_THIS_FORM 0.400 1.038 0.400 1.038
-score FORM_FRAUD_3 1.644 3.799 1.644 3.799
+score CK_HELO_DYNAMIC_SPLIT_IP 1.499 0.001 1.499 0.001
+score COMMENT_GIBBERISH 1.000 1.000 1.000 1.000
+score COMPENSATION 1.500 1.499 1.500 1.499
+score DEAR_BENEFICIARY 1.507 3.199 1.507 3.199
+score DSN_NO_MIMEVERSION 0.001 2.000 0.001 2.000
+score EMAIL_URI_PHISH 1.000 1.000 1.000 1.000
+score FBI_MONEY 1.000 1.000 1.000 1.000
+score FBI_SPOOF 1.000 1.000 1.000 1.000
+score FILL_THIS_FORM 0.001 0.001 0.001 0.001
+score FORM_FRAUD_3 1.673 1.960 1.673 1.960
score FORM_FRAUD_5 0.001 0.001 0.001 0.001
score FORM_LOW_CONTRAST 1.000 1.000 1.000 1.000
-score FOUND_YOU 1.000 3.250 1.000 3.250
+score FOUND_YOU 1.000 1.000 1.000 1.000
score FREEMAIL_FORGED_FROMDOMAIN 0.001 0.001 0.001 0.001
-score FROM_12LTRDOM 0.100 0.100 0.100 0.100
+score FROM_12LTRDOM 0.001 0.001 0.001 0.001
score FROM_MISSPACED 0.001 0.001 0.001 0.001
score FROM_MISSP_FREEMAIL 0.001 0.001 0.001 0.001
score FROM_MISSP_MSFT 0.001 0.001 0.001 0.001
-score FROM_MISSP_REPLYTO 0.481 0.001 0.481 0.001
+score FROM_MISSP_PHISH 2.409 4.433 2.409 4.433
+score FROM_MISSP_REPLYTO 0.001 0.001 0.001 0.001
score FROM_MISSP_SPF_FAIL 0.001 1.000 0.001 1.000
score FROM_MISSP_TO_UNDISC 0.001 0.001 0.001 0.001
score FROM_MISSP_USER 0.001 0.001 0.001 0.001
score FSL_CTYPE_WIN1251 0.001 0.001 0.001 0.001
-score FSL_HELO_BARE_IP_2 1.999 2.000 1.999 2.000
-score FSL_NEW_HELO_USER 0.365 0.142 0.365 0.142
+score FSL_HELO_BARE_IP_2 2.000 1.675 2.000 1.675
+score FSL_NEW_HELO_USER 0.001 0.001 0.001 0.001
score GOOGLE_DOCS_PHISH 1.000 1.000 1.000 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000 1.000 1.000 1.000
-score HDRS_MISSP 2.000 2.000 2.000 2.000
+score HDRS_MISSP 0.001 1.999 0.001 1.999
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 0.001 0.001 0.001
-score HEXHASH_WORD 2.200 1.843 2.200 1.843
-score HK_RANDOM_FROM 1.000 0.999 1.000 0.999
-score HK_SCAM_N2 3.137 3.399 3.137 3.399
+score HEXHASH_WORD 2.200 0.264 2.200 0.264
+score HK_NAME_MR_MRS 0.999 0.999 0.999 0.999
+score HK_RANDOM_FROM 0.001 0.001 0.001 0.001
+score HK_SCAM_N2 1.579 2.496 1.579 2.496
+score HK_SCAM_S23 2.999 1.933 2.999 1.933
score HTML_OFF_PAGE 1.000 1.000 1.000 1.000
score LONG_HEX_URI 1.000 1.000 1.000 1.000
-score LONG_IMG_URI 2.999 2.999 2.999 2.999
+score LONG_IMG_URI 2.999 3.000 2.999 3.000
score LOTS_OF_MONEY 0.001 0.001 0.001 0.001
-score LUCRATIVE 1.999 1.999 1.999 1.999
-score MANY_SPAN_IN_TEXT 2.799 0.001 2.799 0.001
+score LOTTO_AGENT 1.405 0.626 1.405 0.626
+score LOTTO_AGENT_RPLY 3.699 0.001 3.699 0.001
+score LOTTO_DEPT 0.001 0.001 0.001 0.001
+score LUCRATIVE 1.999 2.000 1.999 2.000
+score MANY_SPAN_IN_TEXT 1.686 0.001 1.686 0.001
score MIME_NO_TEXT 1.999 2.000 1.999 2.000
-score MONEY_ATM_CARD 0.001 2.513 0.001 2.513
-score MONEY_FORM 1.902 0.172 1.902 0.172
-score MONEY_FORM_SHORT 0.001 2.499 0.001 2.499
-score MONEY_FRAUD_3 3.701 2.100 3.701 2.100
-score MONEY_FRAUD_5 2.983 3.381 2.983 3.381
-score MONEY_FROM_41 1.999 2.000 1.999 2.000
-score MONEY_FROM_MISSP 0.001 0.397 0.001 0.397
-score NSL_RCVD_FROM_USER 0.148 0.338 0.148 0.338
-score NSL_RCVD_HELO_USER 2.235 1.393 2.235 1.393
-score OBFU_TEXT_ATTACH 0.001 2.399 0.001 2.399
-score PP_MIME_FAKE_ASCII_TEXT 1.000 0.457 1.000 0.457
+score MONEY_ATM_CARD 2.128 2.799 2.128 2.799
+score MONEY_FORM 1.039 1.559 1.039 1.559
+score MONEY_FORM_SHORT 0.720 2.192 0.720 2.192
+score MONEY_FRAUD_3 3.487 2.877 3.487 2.877
+score MONEY_FRAUD_5 0.802 1.668 0.802 1.668
+score MONEY_FROM_41 1.999 1.999 1.999 1.999
+score MONEY_FROM_MISSP 0.001 0.001 0.001 0.001
+score MONEY_LOTTERY 1.401 0.638 1.401 0.638
+score NSL_RCVD_FROM_USER 0.001 0.001 0.001 0.001
+score NSL_RCVD_HELO_USER 2.600 1.172 2.600 1.172
+score PP_MIME_FAKE_ASCII_TEXT 0.001 0.001 0.001 0.001
score PUMPDUMP 1.000 1.000 1.000 1.000
score PUMPDUMP_MULTI 1.000 1.000 1.000 1.000
score RCVD_IN_MSPIKE_BL 0.001 0.010 0.001 0.010
-score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001
+score RCVD_IN_MSPIKE_H2 0.001 -0.660 0.001 -0.660
score RCVD_IN_MSPIKE_H3 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H4 0.001 -0.010 0.001 -0.010
score RCVD_IN_MSPIKE_H5 0.001 -1.000 0.001 -1.000
score RCVD_IN_MSPIKE_L2 0.001 0.001 0.001 0.001
-score RCVD_IN_MSPIKE_L3 0.001 2.091 0.001 2.091
-score RCVD_IN_MSPIKE_L4 0.001 1.509 0.001 1.509
-score RCVD_IN_MSPIKE_L5 0.001 1.972 0.001 1.972
+score RCVD_IN_MSPIKE_L3 0.001 1.974 0.001 1.974
+score RCVD_IN_MSPIKE_L4 0.001 2.899 0.001 2.899
+score RCVD_IN_MSPIKE_L5 0.001 3.800 0.001 3.800
score RCVD_IN_MSPIKE_WL 0.001 -0.010 0.001 -0.010
-score RCVD_IN_MSPIKE_ZBI 0.001 0.001 0.001 0.001
-score RISK_FREE 3.199 3.099 3.199 3.099
-score RP_MATCHES_RCVD -1.051 -0.001 -1.051 -0.001
-score STYLE_GIBBERISH 3.999 3.999 3.999 3.999
-score SYSADMIN 0.001 3.499 0.001 3.499
-score THIS_AD 0.401 1.071 0.401 1.071
+score RCVD_IN_MSPIKE_ZBI 0.001 1.424 0.001 1.424
+score RP_MATCHES_RCVD 0.001 -0.630 0.001 -0.630
+score SERGIO_SUBJECT_PORN014 0.001 3.899 0.001 3.899
+score STYLE_GIBBERISH 3.999 4.000 3.999 4.000
+score SYSADMIN 1.000 1.000 1.000 1.000
+score TAB_IN_FROM 0.001 0.001 0.001 0.001
+score THIS_AD 2.799 1.070 2.799 1.070
score TO_EQ_FM_DOM_SPF_FAIL 0.001 0.001 0.001 0.001
score TO_EQ_FM_SPF_FAIL 0.001 0.001 0.001 0.001
-score TO_NO_BRKTS_FROM_MSSP 0.001 0.302 0.001 0.302
-score TO_NO_BRKTS_HTML_ONLY 0.001 1.308 0.001 1.308
-score TO_NO_BRKTS_MSFT 3.499 3.499 3.499 3.499
-score TO_NO_BRKTS_NORDNS_HTML 0.001 0.001 0.001 0.001
-score TO_NO_BRKTS_PCNT 2.749 2.173 2.749 2.173
-score TVD_FROM_1 0.999 1.000 0.999 1.000
+score TO_NO_BRKTS_FROM_MSSP 0.001 0.076 0.001 0.076
+score TO_NO_BRKTS_HTML_ONLY 0.001 0.001 0.001 0.001
+score TO_NO_BRKTS_MSFT 2.794 3.500 2.794 3.500
+score TO_NO_BRKTS_NORDNS_HTML 0.001 0.624 0.001 0.624
+score TO_NO_BRKTS_PCNT 2.499 2.457 2.499 2.457
score UC_GIBBERISH_OBFU 1.000 1.000 1.000 1.000
-score URI_OPTOUT_USME 3.199 3.100 3.199 3.100
-score XM_PHPMAILER_FORGED 2.599 2.600 2.599 2.600
+score URI_OPTOUT_USME 2.999 2.900 2.999 2.900
Modified: spamassassin/trunk/rulesrc/scores/scores-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set0?rev=1613747&r1=1613746&r2=1613747&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set0 Sun Jul 27 02:35:48 2014
@@ -1,76 +1,77 @@
-# Using score set 0 logs for revision 1609650 from:
-# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-bb-guenther_fraud.log ham-bb-jhardin_fraud.log ham-bb-jhardin.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-traps.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-darxus.log ham-dwarren.log ham-jarif.log ham-kpg-core.log ham-mas-cps.log ham-mas-mas.log ham-zmi.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-bb-guenther_fraud.log spam-bb-jhardin_fraud.log spam-bb-jhardin.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-traps.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-darxus.log spam-dwarren.log spam-jarif.log spam-kpg-core.log spam-mas-cps.log spam-mas-mas.log spam-zmi.log
+# Using score set 0 logs for revision 1613364 from:
+# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-bb-guenther_fraud.log ham-bb-jhardin_fraud.log ham-bb-jhardin.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-traps.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-darxus.log ham-dwarren.log ham-jarif.log ham-kpg-core.log ham-mas-cps.log ham-mas-mas.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-bb-guenther_fraud.log spam-bb-jhardin_fraud.log spam-bb-jhardin.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-traps.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-darxus.log spam-dwarren.log spam-jarif.log spam-kpg-core.log spam-mas-cps.log spam-mas-mas.log
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_SPAMMY_URI_PATTERNS4 3.721
-score ADMAIL 2.899
-score ADVANCE_FEE_2_NEW_FORM 1.999
+score AC_SPAMMY_URI_PATTERNS4 2.954
+score ADMAIL 2.800
score ADVANCE_FEE_2_NEW_FRM_MNY 2.499
score ADVANCE_FEE_2_NEW_MONEY 1.999
score ADVANCE_FEE_3_NEW 2.600
-score ADVANCE_FEE_3_NEW_FORM 0.207
-score ADVANCE_FEE_3_NEW_FRM_MNY 3.123
-score ADVANCE_FEE_3_NEW_MONEY 2.856
-score ADVANCE_FEE_4_NEW 0.540
-score ADVANCE_FEE_4_NEW_FORM 0.001 # force non-zero
+score ADVANCE_FEE_3_NEW_FORM 2.027
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.766
+score ADVANCE_FEE_3_NEW_MONEY 1.654
+score ADVANCE_FEE_4_NEW 0.001
+score ADVANCE_FEE_4_NEW_FORM 0.001
score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW 1.447
-score ADVANCE_FEE_5_NEW_FORM 0.999
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.471
-score ADVANCE_FEE_5_NEW_MONEY 0.235
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.489
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.619
-score BITLY_URI 2.250
+score ADVANCE_FEE_5_NEW 0.001
+score ADVANCE_FEE_5_NEW_FORM 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY 2.601
+score ADVANCE_FEE_5_NEW_MONEY 1.147
+score AD_PREFS 1.699
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.636
+score AXB_X_AOL_SEZ_S 2.601
score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.250
-score COMMENT_GIBBERISH 1.499
-score DEAR_BENEFICIARY 3.236
-score FBI_MONEY 1.999
-score FBI_SPOOF 0.430
-score FILL_THIS_FORM 0.400
-score FORM_FRAUD_3 1.644
+score COMPENSATION 1.500
+score DEAR_BENEFICIARY 1.507
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD_3 1.673
score FORM_FRAUD_5 0.001
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FROM_12LTRDOM 0.100
score FROM_MISSPACED 0.001
-score FROM_MISSP_FREEMAIL 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 0.001
score FROM_MISSP_MSFT 0.001 # force non-zero
-score FROM_MISSP_REPLYTO 0.481
-score FROM_MISSP_TO_UNDISC 0.001
-score FROM_MISSP_USER 0.001 # force non-zero
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_BARE_IP_2 1.999
-score FSL_NEW_HELO_USER 0.365
-score HDRS_MISSP 2.000
+score FROM_MISSP_PHISH 2.409
+score FROM_MISSP_REPLYTO 0.001
+score FROM_MISSP_TO_UNDISC 0.001 # force non-zero
+score FROM_MISSP_USER 0.001
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_HELO_BARE_IP_2 2.000
+score FSL_NEW_HELO_USER 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HEXHASH_WORD 2.200
-score HK_RANDOM_FROM 1.000
-score HK_SCAM_N2 3.137
+score HK_NAME_MR_MRS 0.999
+score HK_SCAM_N2 1.579
+score HK_SCAM_S23 2.999
score LONG_IMG_URI 2.999
score LOTS_OF_MONEY 0.001 # force non-zero
+score LOTTO_AGENT 1.405
+score LOTTO_AGENT_RPLY 3.699
+score LOTTO_DEPT 0.001
score LUCRATIVE 1.999
-score MANY_SPAN_IN_TEXT 2.799
+score MANY_SPAN_IN_TEXT 1.686
score MIME_NO_TEXT 1.999
-score MONEY_FORM 1.902
-score MONEY_FRAUD_3 3.701
-score MONEY_FRAUD_5 2.983
+score MONEY_ATM_CARD 2.128
+score MONEY_FORM 1.039
+score MONEY_FORM_SHORT 0.720
+score MONEY_FRAUD_3 3.487
+score MONEY_FRAUD_5 0.802
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
-score NSL_RCVD_FROM_USER 0.148
-score NSL_RCVD_HELO_USER 2.235
-score PP_MIME_FAKE_ASCII_TEXT 1.000
-score RISK_FREE 3.199
-score RP_MATCHES_RCVD -1.051
+score MONEY_LOTTERY 1.401
+score NSL_RCVD_FROM_USER 0.001
+score NSL_RCVD_HELO_USER 2.600
+score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
score STYLE_GIBBERISH 3.999
-score THIS_AD 0.401
+score TAB_IN_FROM 0.001
+score THIS_AD 2.799
+score TO_NO_BRKTS_FROM_MSSP 0.001 # force non-zero
score TO_NO_BRKTS_HTML_ONLY 0.001
-score TO_NO_BRKTS_MSFT 3.499
-score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.749
-score TVD_FROM_1 0.999
-score URI_OPTOUT_USME 3.199
-score XM_PHPMAILER_FORGED 2.599
+score TO_NO_BRKTS_MSFT 2.794
+score TO_NO_BRKTS_NORDNS_HTML 0.001 # force non-zero
+score TO_NO_BRKTS_PCNT 2.499
+score URI_OPTOUT_USME 2.999
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -81,8 +82,12 @@ score AC_SPAMMY_URI_PATTERNS2 1.0
score AC_SPAMMY_URI_PATTERNS3 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000
+score ADVANCE_FEE_2_NEW_FORM 1.000
score CANT_SEE_AD 1.000
+score COMMENT_GIBBERISH 1.000
score EMAIL_URI_PHISH 1.000
+score FBI_MONEY 1.000
+score FBI_SPOOF 1.000
score FORM_LOW_CONTRAST 1.000
score FOUND_YOU 1.000
score GOOGLE_DOCS_PHISH 1.000
@@ -91,6 +96,7 @@ score HTML_OFF_PAGE 1.0
score LONG_HEX_URI 1.000
score PUMPDUMP 1.000
score PUMPDUMP_MULTI 1.000
+score SYSADMIN 1.000
score UC_GIBBERISH_OBFU 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set1?rev=1613747&r1=1613746&r2=1613747&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set1 Sun Jul 27 02:35:48 2014
@@ -1,89 +1,87 @@
-# Using score set 1 logs for revision 1609892 from:
-# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-bb-guenther_fraud.log ham-net-bb-jhardin_fraud.log ham-net-bb-jhardin.log ham-net-bb-jm.log ham-net-bb-kmcgrail.log ham-net-bb-traps.log ham-net-bb-zmi.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bpoliakoff.log ham-net-darxus.log ham-net-dwarren.log ham-net-jarif.log ham-net-kpg-core.log ham-net-mas-cps.log ham-net-mas-mas.log ham-net-zmi.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin_fraud.log spam-net-bb-jhardin.log spam-net-bb-jm.log spam-net-bb-kmcgrail.log spam-net-bb-traps.log spam-net-bb-zmi.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bpoliakoff.log spam-net-darxus.log spam-net-dwarren.log spam-net-jarif.log spam-net-kpg-core.log spam-net-mas-cps.log spam-net-mas-mas.log spam-net-zmi.log
+# Using score set 1 logs for revision 1613581 from:
+# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-bb-guenther_fraud.log ham-net-bb-jhardin_fraud.log ham-net-bb-jhardin.log ham-net-bb-jm.log ham-net-bb-kmcgrail.log ham-net-bb-traps.log ham-net-bb-zmi.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bpoliakoff.log ham-net-darxus.log ham-net-dwarren.log ham-net-jarif.log ham-net-kpg-core.log ham-net-mas-cps.log ham-net-mas-mas.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin_fraud.log spam-net-bb-jhardin.log spam-net-bb-jm.log spam-net-bb-kmcgrail.log spam-net-bb-traps.log spam-net-bb-zmi.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bpoliakoff.log spam-net-darxus.log spam-net-dwarren.log spam-net-jarif.log spam-net-kpg-core.log spam-net-mas-cps.log spam-net-mas-mas.log
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_SPAMMY_URI_PATTERNS4 1.638
-score ADMAIL 2.800
-score ADVANCE_FEE_2_NEW_FORM 1.608
-score ADVANCE_FEE_2_NEW_FRM_MNY 2.499
-score ADVANCE_FEE_2_NEW_MONEY 2.000
-score ADVANCE_FEE_3_NEW 3.500
-score ADVANCE_FEE_3_NEW_FORM 0.835
-score ADVANCE_FEE_3_NEW_FRM_MNY 2.790
-score ADVANCE_FEE_3_NEW_MONEY 2.672
-score ADVANCE_FEE_4_NEW 1.362
-score ADVANCE_FEE_4_NEW_FORM 0.165
-score ADVANCE_FEE_4_NEW_FRM_MNY 1.958
-score ADVANCE_FEE_4_NEW_MONEY 2.743
-score ADVANCE_FEE_5_NEW 0.841
-score ADVANCE_FEE_5_NEW_FORM 0.032
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.727
-score ADVANCE_FEE_5_NEW_MONEY 0.472
+score AC_SPAMMY_URI_PATTERNS4 1.682
+score ADMAIL 2.699
+score ADVANCE_FEE_2_NEW_FRM_MNY 2.468
+score ADVANCE_FEE_2_NEW_MONEY 1.999
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_FORM 2.082
+score ADVANCE_FEE_3_NEW_FRM_MNY 2.261
+score ADVANCE_FEE_3_NEW_MONEY 0.501
+score ADVANCE_FEE_4_NEW 0.001
+score ADVANCE_FEE_4_NEW_FORM 0.001
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.001
+score ADVANCE_FEE_5_NEW 0.813
+score ADVANCE_FEE_5_NEW_FORM 0.518
+score ADVANCE_FEE_5_NEW_FRM_MNY 2.329
+score ADVANCE_FEE_5_NEW_MONEY 0.553
score AD_PREFS 1.799
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.008
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.987
-score BITLY_URI 2.249
-score CK_HELO_DYNAMIC_SPLIT_IP 1.047
-score CK_HELO_GENERIC 0.250
-score COMMENT_GIBBERISH 1.499
-score DEAR_BENEFICIARY 3.157
-score EMAIL_URI_PHISH 3.999
-score FBI_MONEY 1.525
-score FBI_SPOOF 1.803
-score FILL_THIS_FORM 1.038
-score FORM_FRAUD_3 3.799
-score FORM_FRAUD_5 0.001
-score FOUND_YOU 3.250
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.698
+score AXB_X_AOL_SEZ_S 2.900
+score CK_HELO_DYNAMIC_SPLIT_IP 0.001 # force non-zero
+score COMPENSATION 1.499
+score DEAR_BENEFICIARY 3.199
+score DSN_NO_MIMEVERSION 2.000
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD_3 1.960
+score FORM_FRAUD_5 0.001 # force non-zero
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FROM_12LTRDOM 0.100
+score FROM_12LTRDOM 0.001
score FROM_MISSPACED 0.001
-score FROM_MISSP_FREEMAIL 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 0.001
score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_PHISH 4.433
score FROM_MISSP_REPLYTO 0.001
-score FROM_MISSP_TO_UNDISC 0.001
-score FROM_MISSP_USER 0.001 # force non-zero
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_BARE_IP_2 2.000
-score FSL_NEW_HELO_USER 0.142
-score HDRS_MISSP 2.000
+score FROM_MISSP_TO_UNDISC 0.001 # force non-zero
+score FROM_MISSP_USER 0.001
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_HELO_BARE_IP_2 1.675
+score FSL_NEW_HELO_USER 0.001
+score HDRS_MISSP 1.999
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HEXHASH_WORD 1.843
-score HK_RANDOM_FROM 0.999
-score HK_SCAM_N2 3.399
-score LONG_IMG_URI 2.999
+score HEXHASH_WORD 0.264
+score HK_NAME_MR_MRS 0.999
+score HK_RANDOM_FROM 0.001
+score HK_SCAM_N2 2.496
+score HK_SCAM_S23 1.933
+score LONG_IMG_URI 3.000
score LOTS_OF_MONEY 0.001 # force non-zero
-score LUCRATIVE 1.999
+score LOTTO_AGENT 0.626
+score LOTTO_DEPT 0.001
+score LUCRATIVE 2.000
score MANY_SPAN_IN_TEXT 0.001
score MIME_NO_TEXT 2.000
-score MONEY_ATM_CARD 2.513
-score MONEY_FORM 0.172
-score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 2.100
-score MONEY_FRAUD_5 3.381
-score MONEY_FROM_41 2.000
-score MONEY_FROM_MISSP 0.397
-score NSL_RCVD_FROM_USER 0.338
-score NSL_RCVD_HELO_USER 1.393
-score OBFU_TEXT_ATTACH 2.399
-score PP_MIME_FAKE_ASCII_TEXT 0.457
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
-score RCVD_IN_MSPIKE_L3 2.091
-score RCVD_IN_MSPIKE_L4 1.509
-score RCVD_IN_MSPIKE_L5 1.972
-score RCVD_IN_MSPIKE_ZBI 0.001 # force non-zero
-score RISK_FREE 3.099
-score RP_MATCHES_RCVD -0.001
-score STYLE_GIBBERISH 3.999
-score SYSADMIN 3.499
-score THIS_AD 1.071
-score TO_NO_BRKTS_FROM_MSSP 0.302
-score TO_NO_BRKTS_HTML_ONLY 1.308
-score TO_NO_BRKTS_MSFT 3.499
-score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.173
-score TVD_FROM_1 1.000
-score URI_OPTOUT_USME 3.100
-score XM_PHPMAILER_FORGED 2.600
+score MONEY_ATM_CARD 2.799
+score MONEY_FORM 1.559
+score MONEY_FORM_SHORT 2.192
+score MONEY_FRAUD_3 2.877
+score MONEY_FRAUD_5 1.668
+score MONEY_FROM_41 1.999
+score MONEY_FROM_MISSP 0.001
+score MONEY_LOTTERY 0.638
+score NSL_RCVD_FROM_USER 0.001
+score NSL_RCVD_HELO_USER 1.172
+score PP_MIME_FAKE_ASCII_TEXT 0.001
+score RCVD_IN_MSPIKE_H2 -0.660
+score RCVD_IN_MSPIKE_L3 1.974
+score RCVD_IN_MSPIKE_L4 2.899
+score RCVD_IN_MSPIKE_L5 3.800
+score RCVD_IN_MSPIKE_ZBI 1.424
+score RP_MATCHES_RCVD -0.630
+score SERGIO_SUBJECT_PORN014 3.899
+score STYLE_GIBBERISH 4.000
+score TAB_IN_FROM 0.001 # force non-zero
+score THIS_AD 1.070
+score TO_NO_BRKTS_FROM_MSSP 0.076
+score TO_NO_BRKTS_HTML_ONLY 0.001
+score TO_NO_BRKTS_MSFT 3.500
+score TO_NO_BRKTS_NORDNS_HTML 0.624
+score TO_NO_BRKTS_PCNT 2.457
+score URI_OPTOUT_USME 2.900
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -94,8 +92,14 @@ score AC_SPAMMY_URI_PATTERNS2 1.0
score AC_SPAMMY_URI_PATTERNS3 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000
+score ADVANCE_FEE_2_NEW_FORM 1.000
score CANT_SEE_AD 1.000
+score COMMENT_GIBBERISH 1.000
+score EMAIL_URI_PHISH 1.000
+score FBI_MONEY 1.000
+score FBI_SPOOF 1.000
score FORM_LOW_CONTRAST 1.000
+score FOUND_YOU 1.000
score FROM_MISSP_SPF_FAIL 1.000
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
@@ -108,4 +112,5 @@ score RCVD_IN_MSPIKE_H3 -0.
score RCVD_IN_MSPIKE_H4 -0.010
score RCVD_IN_MSPIKE_H5 -1.000
score RCVD_IN_MSPIKE_WL -0.010
+score SYSADMIN 1.000
score UC_GIBBERISH_OBFU 1.000
Modified: spamassassin/trunk/rulesrc/scores/scores-set2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set2?rev=1613747&r1=1613746&r2=1613747&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set2 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set2 Sun Jul 27 02:35:48 2014
@@ -1,76 +1,77 @@
-# Using score set 0 logs for revision 1609650 from:
-# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-bb-guenther_fraud.log ham-bb-jhardin_fraud.log ham-bb-jhardin.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-traps.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-darxus.log ham-dwarren.log ham-jarif.log ham-kpg-core.log ham-mas-cps.log ham-mas-mas.log ham-zmi.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-bb-guenther_fraud.log spam-bb-jhardin_fraud.log spam-bb-jhardin.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-traps.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-darxus.log spam-dwarren.log spam-jarif.log spam-kpg-core.log spam-mas-cps.log spam-mas-mas.log spam-zmi.log
+# Using score set 0 logs for revision 1613364 from:
+# ham-axb-coi-bulk.log ham-axb-generic.log ham-axb-ham-misc.log ham-bb-guenther_fraud.log ham-bb-jhardin_fraud.log ham-bb-jhardin.log ham-bb-jm.log ham-bb-kmcgrail.log ham-bb-traps.log ham-bb-zmi.log ham-bernie-fsf.log ham-bernie-it_batt.log ham-bpoliakoff.log ham-darxus.log ham-dwarren.log ham-jarif.log ham-kpg-core.log ham-mas-cps.log ham-mas-mas.log spam-axb-coi-bulk.log spam-axb-generic.log spam-axb-ham-misc.log spam-bb-guenther_fraud.log spam-bb-jhardin_fraud.log spam-bb-jhardin.log spam-bb-jm.log spam-bb-kmcgrail.log spam-bb-traps.log spam-bb-zmi.log spam-bernie-fsf.log spam-bernie-it_batt.log spam-bpoliakoff.log spam-darxus.log spam-dwarren.log spam-jarif.log spam-kpg-core.log spam-mas-cps.log spam-mas-mas.log
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_SPAMMY_URI_PATTERNS4 3.721
-score ADMAIL 2.899
-score ADVANCE_FEE_2_NEW_FORM 1.999
+score AC_SPAMMY_URI_PATTERNS4 2.954
+score ADMAIL 2.800
score ADVANCE_FEE_2_NEW_FRM_MNY 2.499
score ADVANCE_FEE_2_NEW_MONEY 1.999
score ADVANCE_FEE_3_NEW 2.600
-score ADVANCE_FEE_3_NEW_FORM 0.207
-score ADVANCE_FEE_3_NEW_FRM_MNY 3.123
-score ADVANCE_FEE_3_NEW_MONEY 2.856
-score ADVANCE_FEE_4_NEW 0.540
-score ADVANCE_FEE_4_NEW_FORM 0.001 # force non-zero
+score ADVANCE_FEE_3_NEW_FORM 2.027
+score ADVANCE_FEE_3_NEW_FRM_MNY 0.766
+score ADVANCE_FEE_3_NEW_MONEY 1.654
+score ADVANCE_FEE_4_NEW 0.001
+score ADVANCE_FEE_4_NEW_FORM 0.001
score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
score ADVANCE_FEE_4_NEW_MONEY 0.001
-score ADVANCE_FEE_5_NEW 1.447
-score ADVANCE_FEE_5_NEW_FORM 0.999
-score ADVANCE_FEE_5_NEW_FRM_MNY 0.471
-score ADVANCE_FEE_5_NEW_MONEY 0.235
-score AXB_XMAILER_MIMEOLE_OL_024C2 0.489
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.619
-score BITLY_URI 2.250
+score ADVANCE_FEE_5_NEW 0.001
+score ADVANCE_FEE_5_NEW_FORM 0.001
+score ADVANCE_FEE_5_NEW_FRM_MNY 2.601
+score ADVANCE_FEE_5_NEW_MONEY 1.147
+score AD_PREFS 1.699
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 2.636
+score AXB_X_AOL_SEZ_S 2.601
score CK_HELO_DYNAMIC_SPLIT_IP 1.499
-score CK_HELO_GENERIC 0.250
-score COMMENT_GIBBERISH 1.499
-score DEAR_BENEFICIARY 3.236
-score FBI_MONEY 1.999
-score FBI_SPOOF 0.430
-score FILL_THIS_FORM 0.400
-score FORM_FRAUD_3 1.644
+score COMPENSATION 1.500
+score DEAR_BENEFICIARY 1.507
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD_3 1.673
score FORM_FRAUD_5 0.001
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FROM_12LTRDOM 0.100
score FROM_MISSPACED 0.001
-score FROM_MISSP_FREEMAIL 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 0.001
score FROM_MISSP_MSFT 0.001 # force non-zero
-score FROM_MISSP_REPLYTO 0.481
-score FROM_MISSP_TO_UNDISC 0.001
-score FROM_MISSP_USER 0.001 # force non-zero
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_BARE_IP_2 1.999
-score FSL_NEW_HELO_USER 0.365
-score HDRS_MISSP 2.000
+score FROM_MISSP_PHISH 2.409
+score FROM_MISSP_REPLYTO 0.001
+score FROM_MISSP_TO_UNDISC 0.001 # force non-zero
+score FROM_MISSP_USER 0.001
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_HELO_BARE_IP_2 2.000
+score FSL_NEW_HELO_USER 0.001
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
score HEXHASH_WORD 2.200
-score HK_RANDOM_FROM 1.000
-score HK_SCAM_N2 3.137
+score HK_NAME_MR_MRS 0.999
+score HK_SCAM_N2 1.579
+score HK_SCAM_S23 2.999
score LONG_IMG_URI 2.999
score LOTS_OF_MONEY 0.001 # force non-zero
+score LOTTO_AGENT 1.405
+score LOTTO_AGENT_RPLY 3.699
+score LOTTO_DEPT 0.001
score LUCRATIVE 1.999
-score MANY_SPAN_IN_TEXT 2.799
+score MANY_SPAN_IN_TEXT 1.686
score MIME_NO_TEXT 1.999
-score MONEY_FORM 1.902
-score MONEY_FRAUD_3 3.701
-score MONEY_FRAUD_5 2.983
+score MONEY_ATM_CARD 2.128
+score MONEY_FORM 1.039
+score MONEY_FORM_SHORT 0.720
+score MONEY_FRAUD_3 3.487
+score MONEY_FRAUD_5 0.802
score MONEY_FROM_41 1.999
score MONEY_FROM_MISSP 0.001
-score NSL_RCVD_FROM_USER 0.148
-score NSL_RCVD_HELO_USER 2.235
-score PP_MIME_FAKE_ASCII_TEXT 1.000
-score RISK_FREE 3.199
-score RP_MATCHES_RCVD -1.051
+score MONEY_LOTTERY 1.401
+score NSL_RCVD_FROM_USER 0.001
+score NSL_RCVD_HELO_USER 2.600
+score PP_MIME_FAKE_ASCII_TEXT 0.001 # force non-zero
score STYLE_GIBBERISH 3.999
-score THIS_AD 0.401
+score TAB_IN_FROM 0.001
+score THIS_AD 2.799
+score TO_NO_BRKTS_FROM_MSSP 0.001 # force non-zero
score TO_NO_BRKTS_HTML_ONLY 0.001
-score TO_NO_BRKTS_MSFT 3.499
-score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.749
-score TVD_FROM_1 0.999
-score URI_OPTOUT_USME 3.199
-score XM_PHPMAILER_FORGED 2.599
+score TO_NO_BRKTS_MSFT 2.794
+score TO_NO_BRKTS_NORDNS_HTML 0.001 # force non-zero
+score TO_NO_BRKTS_PCNT 2.499
+score URI_OPTOUT_USME 2.999
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -81,8 +82,12 @@ score AC_SPAMMY_URI_PATTERNS2 1.0
score AC_SPAMMY_URI_PATTERNS3 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000
+score ADVANCE_FEE_2_NEW_FORM 1.000
score CANT_SEE_AD 1.000
+score COMMENT_GIBBERISH 1.000
score EMAIL_URI_PHISH 1.000
+score FBI_MONEY 1.000
+score FBI_SPOOF 1.000
score FORM_LOW_CONTRAST 1.000
score FOUND_YOU 1.000
score GOOGLE_DOCS_PHISH 1.000
@@ -91,6 +96,7 @@ score HTML_OFF_PAGE 1.0
score LONG_HEX_URI 1.000
score PUMPDUMP 1.000
score PUMPDUMP_MULTI 1.000
+score SYSADMIN 1.000
score UC_GIBBERISH_OBFU 1.000
# in active.list but have no hits in recent corpus
score FROM_MISSP_SPF_FAIL 0.001 # force non-zero
Modified: spamassassin/trunk/rulesrc/scores/scores-set3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/scores-set3?rev=1613747&r1=1613746&r2=1613747&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/scores-set3 (original)
+++ spamassassin/trunk/rulesrc/scores/scores-set3 Sun Jul 27 02:35:48 2014
@@ -1,89 +1,87 @@
-# Using score set 1 logs for revision 1609892 from:
-# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-bb-guenther_fraud.log ham-net-bb-jhardin_fraud.log ham-net-bb-jhardin.log ham-net-bb-jm.log ham-net-bb-kmcgrail.log ham-net-bb-traps.log ham-net-bb-zmi.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bpoliakoff.log ham-net-darxus.log ham-net-dwarren.log ham-net-jarif.log ham-net-kpg-core.log ham-net-mas-cps.log ham-net-mas-mas.log ham-net-zmi.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin_fraud.log spam-net-bb-jhardin.log spam-net-bb-jm.log spam-net-bb-kmcgrail.log spam-net-bb-traps.log spam-net-bb-zmi.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bpoliakoff.log spam-net-darxus.log spam-net-dwarren.log spam-net-jarif.log spam-net-kpg-core.log spam-net-mas-cps.log spam-net-mas-mas.log spam-net-zmi.log
+# Using score set 1 logs for revision 1613581 from:
+# ham-net-axb-coi-bulk.log ham-net-axb-generic.log ham-net-axb-ham-misc.log ham-net-bb-guenther_fraud.log ham-net-bb-jhardin_fraud.log ham-net-bb-jhardin.log ham-net-bb-jm.log ham-net-bb-kmcgrail.log ham-net-bb-traps.log ham-net-bb-zmi.log ham-net-bernie-fsf.log ham-net-bernie-it_batt.log ham-net-bpoliakoff.log ham-net-darxus.log ham-net-dwarren.log ham-net-jarif.log ham-net-kpg-core.log ham-net-mas-cps.log ham-net-mas-mas.log spam-net-axb-coi-bulk.log spam-net-axb-generic.log spam-net-axb-ham-misc.log spam-net-bb-guenther_fraud.log spam-net-bb-jhardin_fraud.log spam-net-bb-jhardin.log spam-net-bb-jm.log spam-net-bb-kmcgrail.log spam-net-bb-traps.log spam-net-bb-zmi.log spam-net-bernie-fsf.log spam-net-bernie-it_batt.log spam-net-bpoliakoff.log spam-net-darxus.log spam-net-dwarren.log spam-net-jarif.log spam-net-kpg-core.log spam-net-mas-cps.log spam-net-mas-mas.log
score AC_DIV_BONANZA 0.001 # force non-zero
-score AC_SPAMMY_URI_PATTERNS4 1.638
-score ADMAIL 2.800
-score ADVANCE_FEE_2_NEW_FORM 1.608
-score ADVANCE_FEE_2_NEW_FRM_MNY 2.499
-score ADVANCE_FEE_2_NEW_MONEY 2.000
-score ADVANCE_FEE_3_NEW 3.500
-score ADVANCE_FEE_3_NEW_FORM 0.835
-score ADVANCE_FEE_3_NEW_FRM_MNY 2.790
-score ADVANCE_FEE_3_NEW_MONEY 2.672
-score ADVANCE_FEE_4_NEW 1.362
-score ADVANCE_FEE_4_NEW_FORM 0.165
-score ADVANCE_FEE_4_NEW_FRM_MNY 1.958
-score ADVANCE_FEE_4_NEW_MONEY 2.743
-score ADVANCE_FEE_5_NEW 0.841
-score ADVANCE_FEE_5_NEW_FORM 0.032
-score ADVANCE_FEE_5_NEW_FRM_MNY 1.727
-score ADVANCE_FEE_5_NEW_MONEY 0.472
+score AC_SPAMMY_URI_PATTERNS4 1.682
+score ADMAIL 2.699
+score ADVANCE_FEE_2_NEW_FRM_MNY 2.468
+score ADVANCE_FEE_2_NEW_MONEY 1.999
+score ADVANCE_FEE_3_NEW 3.499
+score ADVANCE_FEE_3_NEW_FORM 2.082
+score ADVANCE_FEE_3_NEW_FRM_MNY 2.261
+score ADVANCE_FEE_3_NEW_MONEY 0.501
+score ADVANCE_FEE_4_NEW 0.001
+score ADVANCE_FEE_4_NEW_FORM 0.001
+score ADVANCE_FEE_4_NEW_FRM_MNY 0.001
+score ADVANCE_FEE_4_NEW_MONEY 0.001
+score ADVANCE_FEE_5_NEW 0.813
+score ADVANCE_FEE_5_NEW_FORM 0.518
+score ADVANCE_FEE_5_NEW_FRM_MNY 2.329
+score ADVANCE_FEE_5_NEW_MONEY 0.553
score AD_PREFS 1.799
-score AXB_XMAILER_MIMEOLE_OL_024C2 1.008
-score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.987
-score BITLY_URI 2.249
-score CK_HELO_DYNAMIC_SPLIT_IP 1.047
-score CK_HELO_GENERIC 0.250
-score COMMENT_GIBBERISH 1.499
-score DEAR_BENEFICIARY 3.157
-score EMAIL_URI_PHISH 3.999
-score FBI_MONEY 1.525
-score FBI_SPOOF 1.803
-score FILL_THIS_FORM 1.038
-score FORM_FRAUD_3 3.799
-score FORM_FRAUD_5 0.001
-score FOUND_YOU 3.250
+score AXB_XMAILER_MIMEOLE_OL_024C2 0.001 # force non-zero
+score AXB_XMAILER_MIMEOLE_OL_1ECD5 1.698
+score AXB_X_AOL_SEZ_S 2.900
+score CK_HELO_DYNAMIC_SPLIT_IP 0.001 # force non-zero
+score COMPENSATION 1.499
+score DEAR_BENEFICIARY 3.199
+score DSN_NO_MIMEVERSION 2.000
+score FILL_THIS_FORM 0.001
+score FORM_FRAUD_3 1.960
+score FORM_FRAUD_5 0.001 # force non-zero
score FREEMAIL_FORGED_FROMDOMAIN 0.001 # force non-zero
-score FROM_12LTRDOM 0.100
+score FROM_12LTRDOM 0.001
score FROM_MISSPACED 0.001
-score FROM_MISSP_FREEMAIL 0.001 # force non-zero
+score FROM_MISSP_FREEMAIL 0.001
score FROM_MISSP_MSFT 0.001
+score FROM_MISSP_PHISH 4.433
score FROM_MISSP_REPLYTO 0.001
-score FROM_MISSP_TO_UNDISC 0.001
-score FROM_MISSP_USER 0.001 # force non-zero
-score FSL_CTYPE_WIN1251 0.001
-score FSL_HELO_BARE_IP_2 2.000
-score FSL_NEW_HELO_USER 0.142
-score HDRS_MISSP 2.000
+score FROM_MISSP_TO_UNDISC 0.001 # force non-zero
+score FROM_MISSP_USER 0.001
+score FSL_CTYPE_WIN1251 0.001 # force non-zero
+score FSL_HELO_BARE_IP_2 1.675
+score FSL_NEW_HELO_USER 0.001
+score HDRS_MISSP 1.999
score HEADER_FROM_DIFFERENT_DOMAINS 0.001 # force non-zero
-score HEXHASH_WORD 1.843
-score HK_RANDOM_FROM 0.999
-score HK_SCAM_N2 3.399
-score LONG_IMG_URI 2.999
+score HEXHASH_WORD 0.264
+score HK_NAME_MR_MRS 0.999
+score HK_RANDOM_FROM 0.001
+score HK_SCAM_N2 2.496
+score HK_SCAM_S23 1.933
+score LONG_IMG_URI 3.000
score LOTS_OF_MONEY 0.001 # force non-zero
-score LUCRATIVE 1.999
+score LOTTO_AGENT 0.626
+score LOTTO_DEPT 0.001
+score LUCRATIVE 2.000
score MANY_SPAN_IN_TEXT 0.001
score MIME_NO_TEXT 2.000
-score MONEY_ATM_CARD 2.513
-score MONEY_FORM 0.172
-score MONEY_FORM_SHORT 2.499
-score MONEY_FRAUD_3 2.100
-score MONEY_FRAUD_5 3.381
-score MONEY_FROM_41 2.000
-score MONEY_FROM_MISSP 0.397
-score NSL_RCVD_FROM_USER 0.338
-score NSL_RCVD_HELO_USER 1.393
-score OBFU_TEXT_ATTACH 2.399
-score PP_MIME_FAKE_ASCII_TEXT 0.457
-score RCVD_IN_MSPIKE_H2 -0.001 # force non-zero
-score RCVD_IN_MSPIKE_L3 2.091
-score RCVD_IN_MSPIKE_L4 1.509
-score RCVD_IN_MSPIKE_L5 1.972
-score RCVD_IN_MSPIKE_ZBI 0.001 # force non-zero
-score RISK_FREE 3.099
-score RP_MATCHES_RCVD -0.001
-score STYLE_GIBBERISH 3.999
-score SYSADMIN 3.499
-score THIS_AD 1.071
-score TO_NO_BRKTS_FROM_MSSP 0.302
-score TO_NO_BRKTS_HTML_ONLY 1.308
-score TO_NO_BRKTS_MSFT 3.499
-score TO_NO_BRKTS_NORDNS_HTML 0.001
-score TO_NO_BRKTS_PCNT 2.173
-score TVD_FROM_1 1.000
-score URI_OPTOUT_USME 3.100
-score XM_PHPMAILER_FORGED 2.600
+score MONEY_ATM_CARD 2.799
+score MONEY_FORM 1.559
+score MONEY_FORM_SHORT 2.192
+score MONEY_FRAUD_3 2.877
+score MONEY_FRAUD_5 1.668
+score MONEY_FROM_41 1.999
+score MONEY_FROM_MISSP 0.001
+score MONEY_LOTTERY 0.638
+score NSL_RCVD_FROM_USER 0.001
+score NSL_RCVD_HELO_USER 1.172
+score PP_MIME_FAKE_ASCII_TEXT 0.001
+score RCVD_IN_MSPIKE_H2 -0.660
+score RCVD_IN_MSPIKE_L3 1.974
+score RCVD_IN_MSPIKE_L4 2.899
+score RCVD_IN_MSPIKE_L5 3.800
+score RCVD_IN_MSPIKE_ZBI 1.424
+score RP_MATCHES_RCVD -0.630
+score SERGIO_SUBJECT_PORN014 3.899
+score STYLE_GIBBERISH 4.000
+score TAB_IN_FROM 0.001 # force non-zero
+score THIS_AD 1.070
+score TO_NO_BRKTS_FROM_MSSP 0.076
+score TO_NO_BRKTS_HTML_ONLY 0.001
+score TO_NO_BRKTS_MSFT 3.500
+score TO_NO_BRKTS_NORDNS_HTML 0.624
+score TO_NO_BRKTS_PCNT 2.457
+score URI_OPTOUT_USME 2.900
score AC_BR_BONANZA 0.001
score AC_HTML_NONSENSE_TAGS 1.000
score AC_SPAMMY_URI_PATTERNS1 1.000
@@ -94,8 +92,14 @@ score AC_SPAMMY_URI_PATTERNS2 1.0
score AC_SPAMMY_URI_PATTERNS3 1.000
score AC_SPAMMY_URI_PATTERNS8 1.000
score AC_SPAMMY_URI_PATTERNS9 1.000
+score ADVANCE_FEE_2_NEW_FORM 1.000
score CANT_SEE_AD 1.000
+score COMMENT_GIBBERISH 1.000
+score EMAIL_URI_PHISH 1.000
+score FBI_MONEY 1.000
+score FBI_SPOOF 1.000
score FORM_LOW_CONTRAST 1.000
+score FOUND_YOU 1.000
score FROM_MISSP_SPF_FAIL 1.000
score GOOGLE_DOCS_PHISH 1.000
score GOOGLE_DOCS_PHISH_MANY 1.000
@@ -108,4 +112,5 @@ score RCVD_IN_MSPIKE_H3 -0.
score RCVD_IN_MSPIKE_H4 -0.010
score RCVD_IN_MSPIKE_H5 -1.000
score RCVD_IN_MSPIKE_WL -0.010
+score SYSADMIN 1.000
score UC_GIBBERISH_OBFU 1.000
Modified: spamassassin/trunk/rulesrc/scores/stats-set0
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set0?rev=1613747&r1=1613746&r2=1613747&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set0 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set0 Sun Jul 27 02:35:48 2014
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 158522 21.168% (97.987% of non-spam corpus)
-# Correctly spam: 553213 73.871% (94.227% of spam corpus)
-# False positives: 3256 0.435% (2.013% of nonspam, 366324 weighted)
-# False negatives: 33895 4.526% (5.773% of spam, 83476 weighted)
-# Average score for spam: 11.2 nonspam: 0.8
-# Average for false-pos: 6.2 false-neg: 2.5
-# TOTAL: 748886 100.00%
+# Correctly non-spam: 160592 29.057% (97.570% of non-spam corpus)
+# Correctly spam: 322765 58.400% (83.168% of spam corpus)
+# False positives: 3999 0.724% (2.430% of nonspam, 288313 weighted)
+# False negatives: 65321 11.819% (16.832% of spam, 226080 weighted)
+# Average score for spam: 8.7 nonspam: 1.1
+# Average for false-pos: 6.1 false-neg: 3.5
+# TOTAL: 552677 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 19914 97.62%
-# Correctly spam: 69030 94.21%
-# False positives: 485 2.38%
-# False negatives: 4240 5.79%
-# TCR(l=50): 2.571780 SpamRecall: 94.213% SpamPrec: 99.302%
+# Correctly non-spam: 20167 97.30%
+# Correctly spam: 40108 82.94%
+# False positives: 559 2.70%
+# False negatives: 8252 17.06%
+# TCR(l=50): 1.335838 SpamRecall: 82.936% SpamPrec: 98.625%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 158065 97.70%
-# Correctly spam: 135536 23.09%
-# False positives: 3713 2.30%
-# False negatives: 451572 76.91%
-# TCR(l=50): 0.921356 SpamRecall: 23.085% SpamPrec: 97.334%
+# Correctly non-spam: 160758 97.67%
+# Correctly spam: 232453 59.90%
+# False positives: 3833 2.33%
+# False negatives: 155633 40.10%
+# TCR(l=50): 1.117492 SpamRecall: 59.897% SpamPrec: 98.378%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 19918 97.64%
-# Correctly spam: 16935 23.11%
-# False positives: 481 2.36%
-# False negatives: 56335 76.89%
-# TCR(l=50): 0.911488 SpamRecall: 23.113% SpamPrec: 97.238%
+# Correctly non-spam: 20210 97.51%
+# Correctly spam: 29001 59.97%
+# False positives: 516 2.49%
+# False negatives: 19359 40.03%
+# TCR(l=50): 1.070883 SpamRecall: 59.969% SpamPrec: 98.252%
Modified: spamassassin/trunk/rulesrc/scores/stats-set1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/stats-set1?rev=1613747&r1=1613746&r2=1613747&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/scores/stats-set1 (original)
+++ spamassassin/trunk/rulesrc/scores/stats-set1 Sun Jul 27 02:35:48 2014
@@ -1,40 +1,40 @@
##### WITH NEW RULES AND SCORES #####
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 161174 32.755% (99.547% of non-spam corpus)
-# Correctly spam: 308344 62.665% (93.397% of spam corpus)
-# False positives: 734 0.149% (0.453% of nonspam, 97242 weighted)
-# False negatives: 21801 4.431% (6.603% of spam, 38584 weighted)
-# Average score for spam: 16.9 nonspam: -0.4
-# Average for false-pos: 6.5 false-neg: 1.8
-# TOTAL: 492053 100.00%
+# Correctly non-spam: 163953 29.562% (99.589% of non-spam corpus)
+# Correctly spam: 375859 67.771% (96.381% of spam corpus)
+# False positives: 677 0.122% (0.411% of nonspam, 103104 weighted)
+# False negatives: 14112 2.545% (3.619% of spam, 26365 weighted)
+# Average score for spam: 15.9 nonspam: -0.6
+# Average for false-pos: 6.4 false-neg: 1.9
+# TOTAL: 554601 100.00%
Reading scores from "tmprules"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 20317 99.53%
-# Correctly spam: 38453 93.43%
-# False positives: 96 0.47%
-# False negatives: 2703 6.57%
-# TCR(l=50): 5.485273 SpamRecall: 93.432% SpamPrec: 99.751%
+# Correctly non-spam: 20631 99.51%
+# Correctly spam: 46883 96.42%
+# False positives: 102 0.49%
+# False negatives: 1740 3.58%
+# TCR(l=50): 7.108626 SpamRecall: 96.421% SpamPrec: 99.783%
##### WITHOUT NEW RULES AND SCORES #####
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 161523 99.76%
-# Correctly spam: 266077 80.59%
-# False positives: 385 0.24%
-# False negatives: 64068 19.41%
-# TCR(l=50): 3.962469 SpamRecall: 80.594% SpamPrec: 99.856%
+# Correctly non-spam: 164239 99.76%
+# Correctly spam: 362662 93.00%
+# False positives: 391 0.24%
+# False negatives: 27309 7.00%
+# TCR(l=50): 8.322222 SpamRecall: 92.997% SpamPrec: 99.892%
Reading scores from "../rules-base"...
Reading per-message hit stat logs and scores...
# SUMMARY for threshold 5.0:
-# Correctly non-spam: 20366 99.77%
-# Correctly spam: 33155 80.56%
-# False positives: 47 0.23%
-# False negatives: 8001 19.44%
-# TCR(l=50): 3.976041 SpamRecall: 80.559% SpamPrec: 99.858%
+# Correctly non-spam: 20678 99.73%
+# Correctly spam: 45211 92.98%
+# False positives: 55 0.27%
+# False negatives: 3412 7.02%
+# TCR(l=50): 7.890782 SpamRecall: 92.983% SpamPrec: 99.878%