Skip to content

BAYES and other spam discrepancies in EFA5 #25

Description

@gregecslo

Hi.

As per this post: https://forum.efa-project.org/viewtopic.php?t=5429

So, when doind spamassassinn -D test I have this:

`Nov 6 14:21:26.964 [1036654] dbg: bayes: tokenized body: 2737 tokens
Nov 6 14:21:26.965 [1036654] dbg: bayes: tokenized uri: 120 tokens
Nov 6 14:21:26.965 [1036654] dbg: bayes: tokenized invisible: 6 tokens
Nov 6 14:21:26.966 [1036654] dbg: bayes: tokenized header: 82 tokens
Nov 6 14:21:26.970 [1036654] dbg: bayes: tok_get_all: token count: 586
Nov 6 14:21:26.981 [1036654] dbg: bayes: score = 0.101741519786307

Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag BAYESTCHAMMY is now ready, value: 2
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag BAYESTCSPAMMY is now ready, value: 0
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag BAYESTCLEARNED is now ready, value: 2
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag BAYESTC is now ready, value: 586
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag HAMMYTOKENS is now ready, value: CODE(0x560baecc6878)
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag SPAMMYTOKENS is now ready, value: CODE(0x560baecc5750)
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag TOKENSUMMARY is now ready, value: CODE(0x560bac43f1e0)
Nov 6 14:21:26.984 [1036654] dbg: rules: ran eval rule BAYES_20 ======> got hit (1)

Nov 6 14:21:27.943 [1036654] dbg: check: tests=ALL_TRUSTED,BAYES_20,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,T_KAM_HTML_FONT_INVALID
Nov 6 14:21:27.943 [1036654] dbg: check: subtests=__ANY_IMAGE_ATTACH,__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,__BODY_TEXT_LINE(3),__COMMENT_EXISTS,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__CTYPE_MULTIPART_ANY,__DKIM_DEPENDABLE,__DKIM_EXISTS,__DOS_BODY_MON,__DOS_BODY_TUE,__DOS_BODY_WED,__DOS_HAS_ANY_URI,__DOS_LINK,__DOS_RCVD_WED,__DOS_REF_TODAY,__E_LIKE_LETTER(320),__FILL_THIS_FORM_FRAUD_PHISH1,__FROM_FULL_NAME,__FROM_WORDY,__GB_FAKE_RF,__GB_TO_ADDR,__HAS_ANY_EMAIL,__HAS_ANY_URI,__HAS_DATE,__HAS_DKIM_SIGHD,__HAS_FROM,__HAS_HREF(23),__HAS_HREF_ONECASE(23),__HAS_IN_REPLY_TO,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAS_THREAD_INDEX,__HAS_TNEF,__HAS_TO,__HAS_URI,__HAS_X_LOOP,__HAS_X_REF,__HIGHBITS,__HS_SUBJ_RE_FW,__HTML_LINK_IMAGE,__HTML_SINGLET(5),__HUSH_HUSH,__JM_REACTOR_DATE,__JPEG_ATTACH,__JPEG_ATTACH_2P,__KAM_HTML_FONT_INVALID,__LOCAL_PP_NONPPURL,__LOWER_E(230),__L_BODY_8BITS,__MIME_BASE64,__MIME_HTML,__MIME_VERSION,__MSGID_OK_HOST,__NONEMPTY_BODY,__NOT_SPOOFED,__PART_STOCK_CD_F,__PNG_ATTACH_2P,__RATWARE_0_TZ_DATE,__SANE_MSGID,__SINGLE_WORD_LINE(2),__SUBJ_NOT_SHORT,__SUBJ_RE,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TAG_EXISTS_STYLE,__THREADED,__TOCC_EXISTS,__TO_EQ_FM_DOM_HTML_IMG,__TO_EQ_FROM_DOM,__TO_EQ_FROM_DOM_1,__TVD_MIME_ATT_TP,__TVD_OUTLOOK_IMG,__URI_MAILTO(4),__YOUR_PERSONAL (Total Subtest Hits: 683 / Deduplicated Total Hits: 81)`

But in mailwatch I have:

Score Matching Rule Description -6.00 ALL_TRUSTED Passed through trusted hosts only via SMTP 0.10 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.50 DKIM_VALID Message has at least one valid DKIM or DK signature -1.00 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.10 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.00 HTML_MESSAGE HTML included in message 0.01 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML

  1. So, why debug has BAYES_20 and mailwatch report not?
  2. Why mailwatch report has DKIM_VALID_EF and debug has no such test?

image

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions