On 5/10/2024 2:57 AM, Thomas Barth wrote:
Am 2024-05-10 06:19, schrieb Reindl Harald (privat):
Am 10.05.24 um 00:05 schrieb Thomas Barth:
Am 2024-05-09 21:41, schrieb Loren Wilton:
Low-score tests are neither spam nor ham signs by themselves. They
can be used in metas in conjunction with other indicators to help
determine ham or spam. A zero value indicates that a rule didn't
hit and the sign is not present. A small score indicates that the
rule did hit, so the sign it is detecting is present.
0.001 seems to be the default lowest value. Is it possible to change
it to 0.01 or 0.1?
what do you not understand in meta tests?
it's irrelevant if it's 0.001 or 0.01
these rules are used in combination with other rules
HTML_MESSAGE or SPF_HELO_NONE alone don't mean anything and so it
must not score higher - it makes only sense combined with other rules
Most of the messages I receive only have a few hits because they
hardly differ from a regular e-mail. That's why I want to assign a
higher value to the individual tests. I don't know how many of the
possible tests with a value of only 0.001 exist. With this value,
theoretically 1000 different tests would have to be positive in order
to achieve a total value of 1. Therefore, it is not irrelevant whether
I have a minimum value of 0.001 or 0.1. I would even go further and
say if there are more than 10 tests with a positive value: Spam!
Either the strike level is reached or there are more than 10 tests
with a positive value. So now I repeat my question: is it possible to
increase the minimum value to 0.1 by default?
Going through this thread, I note that a few people have said "they are
used in metas", but no one has actually given an example of how that works.
The rules with the low scores are not intended to contribute to the spam
score for the email. They only have a defined score at all because if
the score is 0, SA will not run the rule.
It works like this:
Rule A has a score of 0.001
Rule B has a score of 0.001
Rule C is a meta that matches if both A and B match, and has a score of 5
It doesn't matter how small the scores are for rule A and B. The only
thing that matters is the score for rule C. If only A matches, then it
adds 0.001 to the score and the email is not spam. If only B matches,
then you get the same result. But if they both match, then you get a
score of 5.002. The entire point of the 0.001 score is that you could
match 100 of these rules and not affect the spam score.
These rules are generally things like, "the email has HTML", "there is
an SPF check", "there is a google drive link", etc. On their own, they
do not mean anything, but metas can combine these low-scored rules into
meaningful patterns that are then given larger scores.
--
Bowie
