From users-return-119148-archive-asf-public=cust-asf.ponee.io@spamassassin.apache.org Mon Oct 22 21:13:04 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 7D9E518064A for ; Mon, 22 Oct 2018 21:13:03 +0200 (CEST) Received: (qmail 41089 invoked by uid 500); 22 Oct 2018 19:13:02 -0000 Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@spamassassin.apache.org Received: (qmail 41079 invoked by uid 99); 22 Oct 2018 19:13:01 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 22 Oct 2018 19:13:01 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 0175D180724 for ; Mon, 22 Oct 2018 19:13:01 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.798 X-Spam-Level: X-Spam-Status: No, score=0.798 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id J5CIJAQ6wUAK for ; Mon, 22 Oct 2018 19:12:56 +0000 (UTC) Received: from mail2.impsec.org (ga.impsec.org [108.161.139.220]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 8E2E45F230 for ; Mon, 22 Oct 2018 19:12:56 +0000 (UTC) Received: from athena.impsec.org (localhost [127.0.0.1]) by ga.impsec.org (8.14.7/8.14.7) with ESMTP id w9MJCkxU024914 for ; Mon, 22 Oct 2018 13:12:46 -0600 Received: from athena.impsec.org (tunnel.impsec.org [127.0.0.1]) by athena.impsec.org (8.14.9/8.14.9) with ESMTP id w9MJCk9f005784 for ; Mon, 22 Oct 2018 12:12:46 -0700 Received: from localhost (jhardin@localhost) by athena.impsec.org (8.14.9/8.14.9/Submit) with ESMTP id w9MJCklg005776 for ; Mon, 22 Oct 2018 12:12:46 -0700 X-Authentication-Warning: athena.impsec.org: jhardin owned process doing -bs Date: Mon, 22 Oct 2018 12:12:45 -0700 (PDT) From: John Hardin To: users@spamassassin.apache.org Subject: Re: Extreme scores from FRNAME rules. In-Reply-To: Message-ID: References: User-Agent: Alpine 2.21 (LNX 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: inspected by milter-greylist-4.5.16 (ga.impsec.org [127.0.0.1]); Mon, 22 Oct 2018 13:12:46 -0600 (CST) for IP:'127.0.0.1' DOMAIN:'localhost' HELO:'athena.impsec.org' FROM:'jhardin@impsec.org' RCPT:'' X-Greylist: Sender IP whitelisted, ACL 251 matched, not delayed by milter-greylist-4.5.16 (ga.impsec.org [127.0.0.1]); Mon, 22 Oct 2018 13:12:46 -0600 (CST) On Mon, 22 Oct 2018, Reio Remma wrote: > Hello! > > I have this perfectly legit mail that has a +7.5 score from these three > rules. > > * 2.5 FRNAME_IN_MSG_XPRIO From name in message + X-Priority > * 2.5 XPRIO_SHORT_SUBJ Has X-Priority header + short subject > * 2.5 FRNAME_IN_MSG_NO_SUBJ From name in message + short or no subject > > If it wasn't for the -1.9 from Bayes and -2.6 from TxRep, it would have been > thrown away. > > Should these XPRIO/FRNAME rules stack like this? > > The e-mail in question is available here: > > https://bz.apache.org/SpamAssassin/attachment.cgi?id=5607 I checked in some changes to reduce the overlap in the FRNAME rules. The reason they are scoring that high even with overlap is those are strong spam signs in the masscheck corpus. And: Bayes and TxRep did exactly what they are supposed to do here. -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Justice is justice, whereas "social justice" is code for one set of rules for the rich, another for the poor; one set for whites, another set for minorities; one set for straight men, another for women and gays. In short, it's the opposite of actual justice. -- Burt Prelutsky ----------------------------------------------------------------------- 571 days since the first commercial re-flight of an orbital booster (SpaceX)