Liudvikas, Thanks for the debug log. I believe changing the average confidence to a number between 10-20 would mitigate the problem with list related FPs considerably. We will do some statistical analysis and compute a new recommended confidence.
Also, SpamNet (Outlook) users usually have better access to their FPs and do unblock them regularly. cheers, vipul On Sun, Feb 16, 2003 at 09:02:52AM -0500, Liudvikas Bukys wrote: > I like Razor, it catches stuff that nothing else does, and volume is inherent to >spam. > BUT its precision is shot lately. > AND because it never sees content, it can't adjudicate disputes over spamminess in > order to award trust to the folks who are really right. > > -------------------------------------------------------------------------------- > > Here's my score for Bruce's newletter from SpamAssassin 2.50-cvs >(1.168-2003-02-09-exp): > > Content analysis details: (1.70 points, 6.2 required) > DOMAIN_BODY (0.0 points) BODY: Domain registration spam body > OPT_IN_CAPS (0.4 points) BODY: Talks about opting in (capitalized >version) > BAYES_20 (-0.1 points) BODY: Bayesian classifier says spam probability >is 20 to 30% > [score: 0.2634] > RAZOR2_CF_RANGE_01_10 (0.0 points) BODY: Razor2 gives a spam confidence level >between 1 and 10 > [cf: 4] > MIME_LONG_LINE_QP (0.5 points) RAW: Quoted-printable line longer than 76 >characters > NORMAL_HTTP_TO_IP (0.9 points) URI: Uses a dotted-decimal IP address in URL > RAZOR2_CHECK (0.0 points) Listed in Razor2, see http://razor.sf.net/ > > Note: > This is after I did a razor-revoke. RAZOR2_CF before my revoke was 16. > I guess that reveals my trust level in Razor2. > > Note: > Earlier versions that gave RAZOR2_CHECK a weight of 3.9 would have put > me over the default 5.0 threshold. > > -------------------------------------------------------------------------------- > > Here's my deubg log from my razor installation, Razor Agents 2.20, protocol version >3: > > > Razor-Log: Computed razorhome from env: /u/bukys/.razor > Razor-Log: Found razorhome: /u/bukys/.razor > Razor-Log: read_file: 15 items read from /u/bukys/.razor/razor-agent.conf > Feb 16 08:44:30.779587 check[26312]: [ 1] [bootup] Logging initiated >LogDebugLevel=9 to stdout > Feb 16 08:44:30.780462 check[26312]: [ 5] computed razorhome=/u/bukys/.razor, >conf=/u/bukys/.razor/razor-agent.conf, ident=/u/bukys/.razor/identity-lbukys > Feb 16 08:44:30.780529 check[26312]: [ 2] Razor-Agents v2.20 starting >razor-check -d > Feb 16 08:44:30.783475 check[26312]: [ 9] uname -a: Linux >cycle1.cs.rochester.edu 2.4.9-34smp #1 SMP Sat Jun 1 06:15:25 EDT 2002 i686 unknown > Feb 16 08:44:30.783788 check[26312]: [ 8] reading straight RFC822 mail from ><stdin> > Feb 16 08:44:30.786314 check[26312]: [ 6] read 1 mail > Feb 16 08:44:30.786579 check[26312]: [ 8] Client supported_engines: 1 2 3 4 > Feb 16 08:44:30.788258 check[26312]: [ 8] prep_mail done: mail 1 headers=1775, >mime0=43227 > Feb 16 08:44:30.789045 check[26312]: [ 6] skipping whitelist file (empty?): >/u/bukys/.razor/razor-whitelist > Feb 16 08:44:30.789647 check[26312]: [ 5] read_file: 1 items read from >/u/bukys/.razor/servers.discovery.lst > Feb 16 08:44:30.790271 check[26312]: [ 5] read_file: 3 items read from >/u/bukys/.razor/servers.nomination.lst > Feb 16 08:44:30.790637 check[26312]: [ 5] read_file: 2 items read from >/u/bukys/.razor/servers.catalogue.lst > Feb 16 08:44:30.790923 check[26312]: [ 9] Assigning defaults to >conceit.cloudmark.com > Feb 16 08:44:30.791046 check[26312]: [ 9] Assigning defaults to >hubris.cloudmark.com > Feb 16 08:44:30.791164 check[26312]: [ 9] Assigning defaults to joy.cloudmark.com > Feb 16 08:44:30.791287 check[26312]: [ 9] Assigning defaults to >truth.cloudmark.com > Feb 16 08:44:30.791406 check[26312]: [ 9] Assigning defaults to >shock.cloudmark.com > Feb 16 08:44:30.792477 check[26312]: [ 5] read_file: 11 items read from >/u/bukys/.razor/server.truth.cloudmark.com.conf > Feb 16 08:44:30.792973 check[26312]: [ 5] read_file: 12 items read from >/u/bukys/.razor/server.hubris.cloudmark.com.conf > Feb 16 08:44:30.793465 check[26312]: [ 5] read_file: 12 items read from >/u/bukys/.razor/server.fire.cloudmark.com.conf > Feb 16 08:44:30.793946 check[26312]: [ 5] read_file: 12 items read from >/u/bukys/.razor/server.honor.cloudmark.com.conf > Feb 16 08:44:30.794432 check[26312]: [ 5] read_file: 12 items read from >/u/bukys/.razor/server.conceit.cloudmark.com.conf > Feb 16 08:44:30.794920 check[26312]: [ 5] read_file: 12 items read from >/u/bukys/.razor/server.shock.cloudmark.com.conf > Feb 16 08:44:30.795406 check[26312]: [ 5] read_file: 12 items read from >/u/bukys/.razor/server.joy.cloudmark.com.conf > Feb 16 08:44:30.796047 check[26312]: [ 5] 150598 seconds before closest server >discovery > Feb 16 08:44:30.796209 check[26312]: [ 6] truth.cloudmark.com is a Catalogue >Server srl 61; computed min_cf=1, Server se: 0A > Feb 16 08:44:30.796360 check[26312]: [ 8] Computed supported_engines: 2 4 > Feb 16 08:44:30.796463 check[26312]: [ 8] Using next closest server >truth.cloudmark.com:2703, cached info srl 61 > Feb 16 08:44:30.796664 check[26312]: [ 8] mail 1 Subject: CRYPTO-GRAM, February >15, 2003 > Feb 16 08:44:30.806421 check[26312]: [ 6] preproc: mail 1.0 went from 43227 >bytes to 42099 > Feb 16 08:44:30.806602 check[26312]: [ 6] computing sigs for mail 1.0, len 42099 > Feb 16 08:44:30.810907 check[26312]: [ 5] Connecting to truth.cloudmark.com ... > Feb 16 08:44:31.115858 check[26312]: [ 8] Connection established > Feb 16 08:44:31.115982 check[26312]: [ 4] truth.cloudmark.com >> 29 server >greeting: sn=C&srl=61&ep4=7542-10&a=l > Feb 16 08:44:31.116231 check[26312]: [ 6] truth.cloudmark.com is a Catalogue >Server srl 61; computed min_cf=1, Server se: 0A > Feb 16 08:44:31.116370 check[26312]: [ 8] Computed supported_engines: 2 4 > Feb 16 08:44:31.116481 check[26312]: [ 8] mail 1.0 e2 sig: >YPmL9wRofwyDtjJgH7rsGRptszsA > Feb 16 08:44:31.116569 check[26312]: [ 8] mail 1.0 e4 sig: >zgA9KVHTFM2eG-CHXIrpqJmfdo8A > Feb 16 08:44:31.116669 check[26312]: [ 8] preparing 2 queries > Feb 16 08:44:31.116876 check[26312]: [ 8] sending 1 batches > Feb 16 08:44:31.117009 check[26312]: [ 4] truth.cloudmark.com << 96 > Feb 16 08:44:31.117057 check[26312]: [ 6] -a=c&e=2&s=YPmL9wRofwyDtjJgH7rsGRptszsA > a=c&e=4&ep4=7542-10&s=zgA9KVHTFM2eG-CHXIrpqJmfdo8A > . > Feb 16 08:44:31.219712 check[26312]: [ 4] truth.cloudmark.com >> 24 > Feb 16 08:44:31.219762 check[26312]: [ 6] response to sent.1 > -cf=4&p=1 > cf=4&p=1 > . > Feb 16 08:44:31.220108 check[26312]: [ 6] mail 1.0 e=2 >sig=YPmL9wRofwyDtjJgH7rsGRptszsA: Is spam: cf 4 >= min_cf 1 > Feb 16 08:44:31.220173 check[26312]: [ 6] mail 1.0 e=4 >sig=zgA9KVHTFM2eG-CHXIrpqJmfdo8A: Is spam: cf 4 >= min_cf 1 > Feb 16 08:44:31.220373 check[26312]: [ 7] method 4: mail 1.0: no-contention >part, spam=2 > Feb 16 08:44:31.220423 check[26312]: [ 7] method 4: mail 1: a non-contention >part was spam, mail spam > Feb 16 08:44:31.220470 check[26312]: [ 3] mail 1 is known spam. > Feb 16 08:44:31.220531 check[26312]: [ 5] disconnecting from server >truth.cloudmark.com > Feb 16 08:44:31.220640 check[26312]: [ 4] truth.cloudmark.com << 5 > Feb 16 08:44:31.220683 check[26312]: [ 6] a=q > Feb 16 08:44:31.220827 check[26312]: [ 8] razor-check finished successfully. > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Razor-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/razor-users -- Ummm, well, OK. The network's the network, the computer's the computer. Sorry for the confusion. -- Sun Microsystems ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
