Robert Case wrote:
I'm going to ask a really silly question...
First, my particulars:
Fedora Core 8 x86_64
Qmail 1.03 (Running a Modified QmailRocks configuration, which is everything
except vpopmail)
Qscan
ClamAV
SpamAssassin 3.2.4
I periodically audit messages that get through SpamAssassin to see why they
didn't reach the score threshold (mine is set at 3.5). I compare the
messages with the scoring details that get logged in "maillog".
I noticed that in many of the messages that got through were hitting the
BAYES_00 through BAYES_40 rules.
As several have pointed out already, BAYES_00 is a very strong
indication the message matches your non-spam training. Anything under 50
would indicate it is more likely to be not spam, and the lower the
number, the more likely it is to be nonspam. (in general the two numbers
are the percent chance the message is spam. 00 means 0% chance it's
spam, therefore 100% chance it's not, 40 would mean 40% chance of spam,
and therefore 60% chance it's not.)
If you've got a significant amount of spam matching low-scoring bayes
rules, you should re-examine your bayes training.
