On 4/16/13 2:59 PM, "Ben Johnson" <b...@indietorrent.org> wrote:
>Are there any normal circumstances under which Bayes tests are not run?
Yes, if USE_BAYES = 0 is included in the local.cf file.
>
> If not, are there circumstances under which Bayes tests are run but
> their results are not included in the message headers? (I have tag_level
> set to -999, so SA headers are always added.)
That sounds like an amavisd command, you may want to check in
~amavisd/.spamassassin/user_prefs as well....
>
> Likewise, for the vast majority of spam messages that slip-through, I
> see no evidence of Pyzor or Razor2 activity. I have heretofore assumed
> that this observation indicates that the network tests were performed,
> but did not contribute to the SA score. Is this assumption valid?
Yes.
>
> Also, is there some means by which to *force* Pyzor and Razor2 scores to
> be added to the SA header, even if they did not contribute to the score?
I imagine you would want something like this:
full RAZOR2_CF_RANGE_0_50 eval:check_razor2_range('','0','50')
tflags RAZOR2_CF_RANGE_0_50 net
reuse RAZOR2_CF_RANGE_0_50
describe RAZOR2_CF_RANGE_0_50 Razor2 gives confidence level under 50%
score RAZOR2_CF_RANGE_0_50 0.01
full RAZOR2_CF_RANGE_E4_0_50 eval:check_razor2_range('4','0','50')
tflags RAZOR2_CF_RANGE_E4_0_50 net
reuse RAZOR2_CF_RANGE_E4_0_50
describe RAZOR2_CF_RANGE_E4_0_50 Razor2 gives engine 4 confidence level
below 50%
score RAZOR2_CF_RANGE_E4_0_50 0.01
full RAZOR2_CF_RANGE_E8_0_50 eval:check_razor2_range('8','0','50')
tflags RAZOR2_CF_RANGE_E8_0_50 net
reuse RAZOR2_CF_RANGE_E8_0_50
describe RAZOR2_CF_RANGE_E8_0_50 Razor2 gives engine 8 confidence level
below 50%
score RAZOR2_CF_RANGE_E8_0_50 0.01
>
> To refresh folks' memories, we have verified that Bayes is setup
> correctly (database was wiped and now training is done manually and is
> supervised), and that network tests are being performed when messages
> are scanned.
>
> Thanks for sticking with me through all of this, guys!
>
> -Ben
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281
