Mike Leone wrote:
I have a spam that scored like this:
X-Spam-Status: No, hits=2.4 tagged_above=-999.0 required=5.0 tests=BAYES_56, FORGED_OUTLOOK_TAGS, HTML_60_70, HTML_IMAGE_ONLY_02, HTML_MESSAGE In my local.cf, I made the test HTML_IMAGE_ONLY_02 score 3 points. That would mean that the other tests above totaled a negative value.
I tried looking on http://www.spamassassin.org/tests.html, but I don't see all the tests this email triggered (FORGED_OUTLOOK_TAGS, BAYES_56, etc). So where can I find the values of these tests, to manually add them up, and verify this 2.4 score?
I put together a little script to generate a summary. An example recent spam gives the following output:
~/bin/splain_sa.pl message.eml
The email matched the following rules:
test: X-Spam-Status: Yes score: undefined desc: undefined
test: hits=18.6 required=8.0 BAYES_99 score: undefined desc: undefined
test: HTML_MESSAGE score: 0.160 0.001 0.100 0.100 desc: HTML included in message
test: MIME_HTML_ONLY score: 0.666 0.100 0.248 0.320 desc: Message only has text/html MIME parts
test: MSGID_FROM_MTA_HEADER score: 0.915 0.762 2.044 0.705 desc: Message-Id was added by a relay
test: ONLINE_PHARMACY score: 1.101 2.363 1.001 3.774 desc: Online Pharmacy
test: PYZOR_CHECK score: 0 0.322 0 3.511 desc: Listed in Pyzor (http://pyzor.sf.net/)
test: RAZOR2_CF_RANGE_51_100 score: 0 1.552 0 1.101 desc: Razor2 gives confidence between 51 and 100
test: RAZOR2_CHECK score: 0 0.899 0 1.047 desc: Listed in Razor2 (http://razor.sf.net/)
test: RCVD_IN_BL_SPAMCOP_NET score: 2 desc: Received via a relay in bl.spamcop.net
score: undefined desc: undefined
It's a bit ugly with the output, and as you can see, it was written back when single scores were the norm, but it's a decent starting point for analysis.
The script parses your sa .cf files, so the cool part is that I will include any local rules, non-default rules (like bigevil), etc.
I'll clean it up a bit eventually. In the mean time, you can find the script at:
http://users.2z.net/rpuhek/scripts_public/misc/splain_sa.pl
--Rich
------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
