Liudvikas, 

Thanks for the debug log. I believe changing the average confidence to a
number between 10-20 would mitigate the problem with list related FPs
considerably. We will do some statistical analysis and compute a new 
recommended confidence.

Also, SpamNet (Outlook) users usually have better access to their FPs and
do unblock them regularly.

cheers,
vipul

On Sun, Feb 16, 2003 at 09:02:52AM -0500, Liudvikas Bukys wrote:
> I like Razor, it catches stuff that nothing else does, and volume is inherent to 
>spam.
> BUT its precision is shot lately.
> AND because it never sees content, it can't adjudicate disputes over spamminess in
> order to award trust to the folks who are really right.
> 
> --------------------------------------------------------------------------------
> 
> Here's my score for Bruce's newletter from SpamAssassin 2.50-cvs 
>(1.168-2003-02-09-exp):
> 
>     Content analysis details:   (1.70 points, 6.2 required)
>     DOMAIN_BODY        (0.0 points)  BODY: Domain registration spam body
>     OPT_IN_CAPS        (0.4 points)  BODY: Talks about opting in (capitalized 
>version)
>     BAYES_20           (-0.1 points) BODY: Bayesian classifier says spam probability 
>is 20 to 30%
>                      [score: 0.2634]
>     RAZOR2_CF_RANGE_01_10 (0.0 points)  BODY: Razor2 gives a spam confidence level 
>between 1 and 10
>                      [cf:   4]
>     MIME_LONG_LINE_QP  (0.5 points)  RAW: Quoted-printable line longer than 76 
>characters
>     NORMAL_HTTP_TO_IP  (0.9 points)  URI: Uses a dotted-decimal IP address in URL
>     RAZOR2_CHECK       (0.0 points)  Listed in Razor2, see http://razor.sf.net/
> 
> Note:
> This is after I did a razor-revoke.  RAZOR2_CF before my revoke was 16.
> I guess that reveals my trust level in Razor2.
> 
> Note:
> Earlier versions that gave RAZOR2_CHECK a weight of 3.9 would have put
> me over the default 5.0 threshold.
> 
> --------------------------------------------------------------------------------
> 
> Here's my deubg log from my razor installation, Razor Agents 2.20, protocol version 
>3:
> 
> 
>      Razor-Log: Computed razorhome from env: /u/bukys/.razor
>      Razor-Log: Found razorhome: /u/bukys/.razor
>      Razor-Log: read_file: 15 items read from /u/bukys/.razor/razor-agent.conf
>     Feb 16 08:44:30.779587 check[26312]: [ 1] [bootup] Logging initiated 
>LogDebugLevel=9 to stdout
>     Feb 16 08:44:30.780462 check[26312]: [ 5] computed razorhome=/u/bukys/.razor, 
>conf=/u/bukys/.razor/razor-agent.conf, ident=/u/bukys/.razor/identity-lbukys
>     Feb 16 08:44:30.780529 check[26312]: [ 2]  Razor-Agents v2.20 starting 
>razor-check -d
>     Feb 16 08:44:30.783475 check[26312]: [ 9] uname -a: Linux 
>cycle1.cs.rochester.edu 2.4.9-34smp #1 SMP Sat Jun 1 06:15:25 EDT 2002 i686 unknown
>     Feb 16 08:44:30.783788 check[26312]: [ 8] reading straight RFC822 mail from 
><stdin>
>     Feb 16 08:44:30.786314 check[26312]: [ 6] read 1 mail
>     Feb 16 08:44:30.786579 check[26312]: [ 8] Client supported_engines: 1 2 3 4
>     Feb 16 08:44:30.788258 check[26312]: [ 8]  prep_mail done: mail 1 headers=1775, 
>mime0=43227
>     Feb 16 08:44:30.789045 check[26312]: [ 6] skipping whitelist file (empty?): 
>/u/bukys/.razor/razor-whitelist
>     Feb 16 08:44:30.789647 check[26312]: [ 5] read_file: 1 items read from 
>/u/bukys/.razor/servers.discovery.lst
>     Feb 16 08:44:30.790271 check[26312]: [ 5] read_file: 3 items read from 
>/u/bukys/.razor/servers.nomination.lst
>     Feb 16 08:44:30.790637 check[26312]: [ 5] read_file: 2 items read from 
>/u/bukys/.razor/servers.catalogue.lst
>     Feb 16 08:44:30.790923 check[26312]: [ 9] Assigning defaults to 
>conceit.cloudmark.com
>     Feb 16 08:44:30.791046 check[26312]: [ 9] Assigning defaults to 
>hubris.cloudmark.com
>     Feb 16 08:44:30.791164 check[26312]: [ 9] Assigning defaults to joy.cloudmark.com
>     Feb 16 08:44:30.791287 check[26312]: [ 9] Assigning defaults to 
>truth.cloudmark.com
>     Feb 16 08:44:30.791406 check[26312]: [ 9] Assigning defaults to 
>shock.cloudmark.com
>     Feb 16 08:44:30.792477 check[26312]: [ 5] read_file: 11 items read from 
>/u/bukys/.razor/server.truth.cloudmark.com.conf
>     Feb 16 08:44:30.792973 check[26312]: [ 5] read_file: 12 items read from 
>/u/bukys/.razor/server.hubris.cloudmark.com.conf
>     Feb 16 08:44:30.793465 check[26312]: [ 5] read_file: 12 items read from 
>/u/bukys/.razor/server.fire.cloudmark.com.conf
>     Feb 16 08:44:30.793946 check[26312]: [ 5] read_file: 12 items read from 
>/u/bukys/.razor/server.honor.cloudmark.com.conf
>     Feb 16 08:44:30.794432 check[26312]: [ 5] read_file: 12 items read from 
>/u/bukys/.razor/server.conceit.cloudmark.com.conf
>     Feb 16 08:44:30.794920 check[26312]: [ 5] read_file: 12 items read from 
>/u/bukys/.razor/server.shock.cloudmark.com.conf
>     Feb 16 08:44:30.795406 check[26312]: [ 5] read_file: 12 items read from 
>/u/bukys/.razor/server.joy.cloudmark.com.conf
>     Feb 16 08:44:30.796047 check[26312]: [ 5] 150598 seconds before closest server 
>discovery
>     Feb 16 08:44:30.796209 check[26312]: [ 6] truth.cloudmark.com is a Catalogue 
>Server srl 61; computed min_cf=1, Server se: 0A
>     Feb 16 08:44:30.796360 check[26312]: [ 8] Computed supported_engines: 2 4
>     Feb 16 08:44:30.796463 check[26312]: [ 8] Using next closest server 
>truth.cloudmark.com:2703, cached info srl 61
>     Feb 16 08:44:30.796664 check[26312]: [ 8] mail 1 Subject: CRYPTO-GRAM, February 
>15, 2003
>     Feb 16 08:44:30.806421 check[26312]: [ 6] preproc: mail 1.0 went from 43227 
>bytes to 42099 
>     Feb 16 08:44:30.806602 check[26312]: [ 6] computing sigs for mail 1.0, len 42099
>     Feb 16 08:44:30.810907 check[26312]: [ 5] Connecting to truth.cloudmark.com ...
>     Feb 16 08:44:31.115858 check[26312]: [ 8] Connection established
>     Feb 16 08:44:31.115982 check[26312]: [ 4] truth.cloudmark.com >> 29 server 
>greeting: sn=C&srl=61&ep4=7542-10&a=l
>     Feb 16 08:44:31.116231 check[26312]: [ 6] truth.cloudmark.com is a Catalogue 
>Server srl 61; computed min_cf=1, Server se: 0A
>     Feb 16 08:44:31.116370 check[26312]: [ 8] Computed supported_engines: 2 4
>     Feb 16 08:44:31.116481 check[26312]: [ 8] mail 1.0 e2 sig: 
>YPmL9wRofwyDtjJgH7rsGRptszsA
>     Feb 16 08:44:31.116569 check[26312]: [ 8] mail 1.0 e4 sig: 
>zgA9KVHTFM2eG-CHXIrpqJmfdo8A
>     Feb 16 08:44:31.116669 check[26312]: [ 8] preparing 2 queries
>     Feb 16 08:44:31.116876 check[26312]: [ 8] sending 1 batches
>     Feb 16 08:44:31.117009 check[26312]: [ 4] truth.cloudmark.com << 96
>     Feb 16 08:44:31.117057 check[26312]: [ 6] -a=c&e=2&s=YPmL9wRofwyDtjJgH7rsGRptszsA
>     a=c&e=4&ep4=7542-10&s=zgA9KVHTFM2eG-CHXIrpqJmfdo8A
>     .
>     Feb 16 08:44:31.219712 check[26312]: [ 4] truth.cloudmark.com >> 24
>     Feb 16 08:44:31.219762 check[26312]: [ 6] response to sent.1
>     -cf=4&p=1
>     cf=4&p=1
>     .
>     Feb 16 08:44:31.220108 check[26312]: [ 6] mail 1.0 e=2 
>sig=YPmL9wRofwyDtjJgH7rsGRptszsA: Is spam: cf 4 >= min_cf 1
>     Feb 16 08:44:31.220173 check[26312]: [ 6] mail 1.0 e=4 
>sig=zgA9KVHTFM2eG-CHXIrpqJmfdo8A: Is spam: cf 4 >= min_cf 1
>     Feb 16 08:44:31.220373 check[26312]: [ 7] method 4: mail 1.0: no-contention 
>part, spam=2
>     Feb 16 08:44:31.220423 check[26312]: [ 7] method 4: mail 1: a non-contention 
>part was spam, mail spam
>     Feb 16 08:44:31.220470 check[26312]: [ 3] mail 1 is known spam.
>     Feb 16 08:44:31.220531 check[26312]: [ 5] disconnecting from server 
>truth.cloudmark.com
>     Feb 16 08:44:31.220640 check[26312]: [ 4] truth.cloudmark.com << 5
>     Feb 16 08:44:31.220683 check[26312]: [ 6] a=q
>     Feb 16 08:44:31.220827 check[26312]: [ 8] razor-check finished successfully.
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Razor-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/razor-users

-- 

Ummm, well, OK.  The network's the network, the computer's the computer.
Sorry for the confusion.
                -- Sun Microsystems


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to