Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Date: Sat, 2 Dec 2017 14:03:21 +0100
From: Matus UHLAR - fantomas <uhlar@fantomas.sk>
To: users@spamassassin.apache.org
Subject: Re: HTML_IMAGE_ONLY_* generating too many FP's
Message-ID: <20171202130321.GA1009@fantomas.sk>
Mail-Followup-To: users@spamassassin.apache.org
References: <0b3bb5e1-a0fa-976a-e927-5770f367c9b5@open-t.co.uk>
 <20171130124503.GB19963@fantomas.sk>
 <2a0da3af-a3dc-4d41-2871-d84267f5f13c@open-t.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
In-Reply-To: <2a0da3af-a3dc-4d41-2871-d84267f5f13c@open-t.co.uk>
User-Agent: Mutt/1.5.21 (2010-09-15)
archived-at: Sat, 02 Dec 2017 13:03:35 -0000

>>On 28.11.17 19:39, Sebastian Arcus wrote:
>>>I'm having more and more problems with the HTML_IMAGE_ONLY_* set 
>>>of rules recently generating false positives.

>On 30/11/17 12:45, Matus UHLAR - fantomas wrote:
>>those have lower scorew with BAYES and network rules enabled.
>>configure BAYES and enable netowrk rules...

On 01.12.17 10:17, Sebastian Arcus wrote:
>Hi. I have BAYES enabled and DNSBL's enabled (I assume that's what 
>you mean by network rules?). I still think that a score of 1.6 is 
>quite a lot, considering that so many emails nowadays contain either 
>an embedded logo in the signature, with just a few words (in a quick 
>email reply, for example), or even images inserted, instead of 
>attached to the email. Please see below an example of a SA report:

>1.6 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
>2.0 BAYES_50               BODY: Bayes spam probability is 40 to 60%
>                             [score: 0.4808]

configuring BAYES includes training it, so your mail don't get 0.48 score.

>2.5 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)

now I really wonder why you blame HTML_IMAGE_ONLY_24, when BAYES_50 and
PYZOR_CHECK gave you higher score each?

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I just got lost in thought. It was unfamiliar territory.