On Sun, 21 Sep 2014, Reindl Harald wrote:

Am 20.09.2014 um 23:54 schrieb RW:
On Sat, 20 Sep 2014 15:48:05 +0200
Reindl Harald wrote:

http://www.antivirushelptool.com/spamassassin/header/USER_IN_DEF_DKIM_WL
that's too much and gives even a message on systems where
BAYES_99 and BAYES_999 would reach 8.0 a negative score

Do you have any evidence for it being too much? It seems about right
to me.

If you have an actual problem I'd suggest you use unwhitelist_from_dkim
locally and report the domain so it can be considered for delisting.

The dkim default whitelist contains domains that send a lot of
autogenerated and bulk mail, but have a very low probabilty of sending
spam

how can -7.5 be right?

it bypasses unconditional any bayse regardless if it is trained
with 100, 1000 or 10000 messages ham / spam and that can not
be the the right thing

That's kinda the *point* to a whitelist.

I would suggest getting BAYES_999 on a message that has a valid DKIM signature for a domain in the default DKIM whitelist may instead indicate either bayes mistraining or somebody has put something into the default DKIM whitelist locally that they shouldn't have.

Would you care to share the spam that you posted the scores for at the start of this thread? There's not much we can do with just the rules that hit beside post vague guesses. The critical part is: which domain is that whitelisted DKIM signature for?

Is it possible that your bayes has been trained with legit[1] newsletters that someone is dropping into their spambox rather than unsubscribing from?


[1] "legit" meaning that the person actually subscribed to, or from a sender that the person actually is a customer of or does have a business relationship with.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Markley's Law (variant of Godwin's Law): As an online discussion
  of gun owners' rights grows longer, the probability of an ad hominem
  attack involving penis size approaches 1.
-----------------------------------------------------------------------
 842 days since the first successful private support mission to ISS (SpaceX)

Reply via email to