From users-return-118454-archive-asf-public=cust-asf.ponee.io@spamassassin.apache.org Thu Jun 14 01:39:41 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 0BD7D180609 for ; Thu, 14 Jun 2018 01:39:40 +0200 (CEST) Received: (qmail 81574 invoked by uid 500); 13 Jun 2018 23:39:39 -0000 Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@spamassassin.apache.org Received: (qmail 81558 invoked by uid 99); 13 Jun 2018 23:39:38 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 13 Jun 2018 23:39:38 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 7DAC81A1F07 for ; Wed, 13 Jun 2018 23:39:38 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.798 X-Spam-Level: X-Spam-Status: No, score=0.798 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id YCqLwSgJM819 for ; Wed, 13 Jun 2018 23:39:37 +0000 (UTC) Received: from mail2.impsec.org (ga.impsec.org [108.161.139.220]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 79EA15F36F for ; Wed, 13 Jun 2018 23:39:37 +0000 (UTC) Received: from athena.impsec.org (localhost [127.0.0.1]) by ga.impsec.org (8.14.7/8.14.7) with ESMTP id w5DNdR5B028438 for ; Wed, 13 Jun 2018 17:39:28 -0600 Received: from athena.impsec.org (tunnel.impsec.org [127.0.0.1]) by athena.impsec.org (8.14.9/8.14.9) with ESMTP id w5DNdRVm029540 for ; Wed, 13 Jun 2018 16:39:27 -0700 Received: from localhost (jhardin@localhost) by athena.impsec.org (8.14.9/8.14.9/Submit) with ESMTP id w5DNdRHJ029534 for ; Wed, 13 Jun 2018 16:39:27 -0700 X-Authentication-Warning: athena.impsec.org: jhardin owned process doing -bs Date: Wed, 13 Jun 2018 16:39:27 -0700 (PDT) From: John Hardin To: users@spamassassin.apache.org Subject: Re: MISSING_SUBJECT In-Reply-To: <20180613083800.GA26226@fantomas.sk> Message-ID: References: <87po0vmv8z.fsf@riseup.net> <20180613083800.GA26226@fantomas.sk> User-Agent: Alpine 2.21 (LNX 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: inspected by milter-greylist-4.5.16 (ga.impsec.org [127.0.0.1]); Wed, 13 Jun 2018 17:39:28 -0600 (CST) for IP:'127.0.0.1' DOMAIN:'localhost' HELO:'athena.impsec.org' FROM:'jhardin@impsec.org' RCPT:'' X-Greylist: Sender IP whitelisted, ACL 250 matched, not delayed by milter-greylist-4.5.16 (ga.impsec.org [127.0.0.1]); Wed, 13 Jun 2018 17:39:28 -0600 (CST) On Wed, 13 Jun 2018, Matus UHLAR - fantomas wrote: > On 12.06.18 19:37, micah anderson wrote: >> 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no >> Subject: >> >> It did not have a subject, but it did have content (although only >> encrypted).... it also hit: >> >> * 1.8 MISSING_SUBJECT Missing Subject: header >> >> which makes sense, because the mail did not have one, but have you >> looked in your Spam folder lately? All spam has a subject, pretty much >> always.... an informal survey of my trash heap showed 4 messages out of >> 400 did not have a Subject, and two of them were repeats. > > and what is your point? > > MISSING_SUBJECT is here because when message has no Subject:, it is highly > probably spam. > > it's useless to count how many of spams hit the rule. there are many rules > who hit only small percentage of spam, but all of them hit most of spam. > > what is important is: > > - how much of mails hitting MISSING_SUBJECT is spam > - how much of mails hitting MISSING_SUBJECT is ham. > > if the percentage is very different in there two cases, the rule gets high > positive (or negative) score. S/O = .826 http://ruleqa.spamassassin.org/20180613-r1833448-n/MISSING_SUBJECT/detail -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- As a Turkish general once remarked, the trouble with having the Americans as friends is that you can never be sure when they will turn around and stab themselves in the back. -- Bernard Lewis ----------------------------------------------------------------------- 5 days until SWMBO's Birthday