On 03/03/2011 04:40 PM, Dennis German wrote: > Can someone comment on the low score assigned to the email located at > > http://www.cccu.us/hundredThousand.txt > > X-Spam-testscores: AWL=1.086,BAYES_00=-2.599,HTML_MESSAGE=0.001, > MILLION_USD=1.528 > > Is my bayes "broken"?
Not "broken" so much as "poorly trained" ... you cannot rely upon
SpamAssassin's autolearn functionality to do even a half-decent job.
See the man page on sa-learn and consider using spamassassin -r in place
of sa-learn --spam.
As to the rest of that mail, here's what SA trunk had to say about it
(excluding T_ rules, formatted to 72 chars):
Content analysis details: (19.1 points, 5.0 required)
pts rule name description
---- ---------------------- ----------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser
mail provider
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/
2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature
-0.1 DKIM_VALID Message has at least one valid DKIM
1.0 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
3.5 FILL_THIS_FORM_LONG Fill in a form with personal information
1.0 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud
1.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
1.0 ADVANCE_FEE_2_NEW_FRM_MNY Adv Fee fraud form and lots of money
1.0 ADVANCE_FEE_3_NEW_FRM_MNY Adv Fee fraud form and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
signature.asc
Description: OpenPGP digital signature
