Hi,

I upgraded SpamAssassin from 2.11 to 2.20 and the following things are
IMHO broken (and have lead to false positives) [XXX are things I did
anonymize]:

1.

<--  snip  -->

Date: Mon, 22 Apr 2002 02:10:07 +0200
From: XXX XXX <[EMAIL PROTECTED]>
To: XXX@XXX, XXX@XXX
Subject: Sorry, wegen der vielen Mails!

SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam.  The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details:   (5 hits, 5 required)
SPAM: Hit! (2.0 points)  Forged From: line claiming to be from hotmail.com
SPAM: Hit! (2.0 points)  Subject has lots of exclamation marks
SPAM: Hit! (0.5 points)  Subject has an exclamation mark
SPAM: Hit! (0.5 points)  Forged hotmail.com 'Received:' header found
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------

<--  snip  -->

Since there's only one exclamation mark in the subject I consider the
exxplation a bit wrong (it seems the "," is also conunted) and besides
that two punctuation marks are perhaps not enough to count as PLING_PLING,
I'd suggest a criteria like two punctuation marks in a row instead.


2.

<--  snip  -->

Date: Mon, 22 Apr 2002 00:59:21 +0200 (CEST)
From: XXX XXX <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]

SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam.  The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details:   (6.6 hits, 5 required)
SPAM: Hit! (2.4 points)  'Message-Id' was added by a relay (2)
SPAM: Hit! (1.0 point)   From: ends in numbers
SPAM: Hit! (0.8 points)  'Message-Id' was added by yahoo.com, that's OK
SPAM: Hit! (2.4 points)  Subject: is empty or missing
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------

<--  snip  -->

Your default scores blindly trust a genetic algorithm - in this case the
result is "we know that it's OK that the 'Message-Id' was added by a
relay" but instead of YAHOO_MSGID_ADDED being the negative opposite of
MSG_ID_ADDED_BY_MTA_2 it adds additional 0.8 points. The result is that
although SpamAssassin knows that it's OK this mail gets additional 3.2
points and this mail was therefore classified as spam although it wasn't!


3.
I don't know why, but in mail that is classified as Spam the whole "Start
SpamAssassin results" block is twice in the mail and the second block
starts in the line below the first block. This problem didn't occur in
SpamAssassin 2.11.


cu
Adrian

-- 

You only think this is a free country. Like the US the UK spends a lot of
time explaining its a free country because its a police state.
                                                                Alan Cox












_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to