On Fri, 23 Oct 2020 15:30:47 +0200 Alessio Cecchi wrote: > Hi, > > I have enabled txrep on a test spamassassin setup, but on some emails > with malware file attached, txrep assign a positive score: >
< snip debug showing a negative score > I presume you meant negative as a positive score would be a good thing for malware. > The sender was domain name "dal corte DOT org" that is sending > malware to many different domains hosted by us. > > Is my setup of txrep bad or is "normal"? It's what TxRep does, it adjust the score towards an historic average - with some feature implemented as a fudging of the numbers that produce the mean. Bayes is excluded to prevent TxRep being a brake on learning, but other improvements, such as new listing in net tests, and improved rules, are fair-game.
