You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Halid Faith <ma...@ihlas.net.tr> on 2006/12/07 23:34:32 UTC

How can I learn a mail which how many score it got from each my rules?

I use spamassassin3.1.7

I go through some mails.
I see a mail in /var/log/spamd.log as below
Wed Dec  6 13:33:49 2006 [4484] info: spamd: result: Y 15 -
EXTRA_MPART_TYPE,FRONTPAGE,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART
,MIME_QP_LONG_LINE,MSGID_MULTIPLE_AT,SARE_GIF_ATTACH,SARE_OBFUGIRLS,SUBJ_ALL
_CAPS,SUBJ_ILLEGAL_CHARS,TW_IY,UNPARSEABLE_RELAY,UPPERCA
SE_25_50
scantime=0.6,size=36790,user=mail@domain,uid=1001,required_score=15.0,rhost=
localhost,raddr=127.0.0.1,rport=50832,mi
d=<20...@domain.com>,autolearn=no


Yet, I can't understand which my rule, how many score gave that mail.
How can I learn a mail which how many score it got from each my rules?
is there a command for it ?


RE: How can I learn a mail which how many score it got from each my rules?

Posted by Larry Rosenman <le...@lerctr.org>.
Halid Faith wrote:
> I use spamassassin3.1.7
> 
> I go through some mails.
> I see a mail in /var/log/spamd.log as below Wed Dec  6 13:33:49 2006
> [4484] info: spamd: result: Y 15 -
> EXTRA_MPART_TYPE,FRONTPAGE,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART
>
,MIME_QP_LONG_LINE,MSGID_MULTIPLE_AT,SARE_GIF_ATTACH,SARE_OBFUGIRLS,SUBJ_ALL
> _CAPS,SUBJ_ILLEGAL_CHARS,TW_IY,UNPARSEABLE_RELAY,UPPERCA  
> SE_25_50
>
scantime=0.6,size=36790,user=mail@domain,uid=1001,required_score=15.0,rhost=
> localhost,raddr=127.0.0.1,rport=50832,mi
> d=<20...@domain.com>,autolearn=no
> 
> 
> Yet, I can't understand which my rule, how many score gave that mail.
> How can I learn a mail which how many score it got from each my rules?
> is there a command for it ?

In your user_prefs, add the following:
report _TESTSSCORES( )_

That shows the tests *AND* the scores:

X-LERCTR-Spam-Report: (-108.6 points, 5.0 required)
	BAYES_00=-2.599 DK_POLICY_SIGNSOME=0.001 SPF_PASS=-0.001
UPPERCASE_25_50=0 USER_IN_WHITELIST=-100 USER_IN_WHITELIST_TO=-6

-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 512-248-2683             E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893


Re: How can I learn a mail which how many score it got from each my rules?

Posted by "John D. Hardin" <jh...@impsec.org>.
On Fri, 8 Dec 2006, Halid Faith wrote:

> I go through some mails.
> I see a mail in /var/log/spamd.log as below
> Wed Dec  6 13:33:49 2006 [4484] info: spamd: result: Y 15 -
> EXTRA_MPART_TYPE,FRONTPAGE,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART
> ,MIME_QP_LONG_LINE,MSGID_MULTIPLE_AT,SARE_GIF_ATTACH,SARE_OBFUGIRLS,SUBJ_ALL
> _CAPS,SUBJ_ILLEGAL_CHARS,TW_IY,UNPARSEABLE_RELAY,UPPERCASE_25_50
> 
> Yet, I can't understand which my rule, how many score gave that mail.
> How can I learn a mail which how many score it got from each my rules?
> is there a command for it ?

The per-rule scoring details are probably in a header of the message;
look there, assuming the message hasn't been discarded.

If you look at a spam message and don't see a header with per-rule
scores, then add "report_safe 0" to your config file and restart the
daemon.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...to announce there must be no criticism of the President or to
  stand by the President right or wrong is not only unpatriotic and
  servile, but is morally treasonous to the American public.
                                          -- Theodore Roosevelt, 1918
-----------------------------------------------------------------------
 8 days until Bill of Rights day