On 2/1/10 9:30 AM, "Mark Martinec" <mark.martinec...@ijs.si> wrote:
>>> Update returned sought rules 1/31/2010.
>>
>> Actually back since Jan 6. :) Re-viewed about 1k fraud spam the
>> following days, for the Sought Fraud sub-set.
>
> Btw, the three rules JM_SOUGHT_FRAUD_{1,2,3} have a score of zero
> as per Justin's request (Bug 6155 c 38, c72, c89, c124).
Doesn't appear to be that way in the 3.2.5 channel:
$ cd /var/lib/spamassassin/3.002005/sought_rules_yerp_org/
$ grep score *
20_sought.cf:score JM_SOUGHT_1 4.0
20_sought.cf:score JM_SOUGHT_2 4.0
20_sought.cf:score JM_SOUGHT_3 4.0
20_sought_fraud.cf:score JM_SOUGHT_FRAUD_1 3.0
20_sought_fraud.cf:score JM_SOUGHT_FRAUD_2 3.0
20_sought_fraud.cf:score JM_SOUGHT_FRAUD_3 3.0
$ ls -l
total 128
-rw-r--r-- 1 root root 44591 Feb 1 07:12 20_sought.cf
-rw-r--r-- 1 root root 80120 Feb 1 07:12 20_sought_fraud.cf
-rw-r--r-- 1 root root 29 Feb 1 07:12 MIRRORED.BY
And in fact, looking at the 3.3.0 channel on a different box, the scores are
the same:
$ cd /var/lib/spamassassin/3.003000/sought_rules_yerp_org/
$ grep score *
20_sought.cf:score JM_SOUGHT_1 4.0
20_sought.cf:score JM_SOUGHT_2 4.0
20_sought.cf:score JM_SOUGHT_3 4.0
20_sought_fraud.cf:score JM_SOUGHT_FRAUD_1 3.0
20_sought_fraud.cf:score JM_SOUGHT_FRAUD_2 3.0
20_sought_fraud.cf:score JM_SOUGHT_FRAUD_3 3.0
> Not sure if people using the channel realize that scores
> need to be bumped up. Btw, I prefer to avoid them monopolizing
> the score when more than one hits:
>
> score JM_SOUGHT_FRAUD_1 0.1
> score JM_SOUGHT_FRAUD_2 0.1
> score JM_SOUGHT_FRAUD_3 0.1
> meta JM_SOUGHT_FRAUD_ANY JM_SOUGHT_FRAUD_1 || JM_SOUGHT_FRAUD_2 ||
> JM_SOUGHT_FRAUD_3
> score JM_SOUGHT_FRAUD_ANY 3.0
>
>
> Mark
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281
