Hi,
I just noticed something weird regarding the sa-stats output:
Email: 71 Autolearn: 3 AvgScore: 2.34 AvgScanTime:
0.70 sec
Spam: 15 Autolearn: 3 AvgScore: 8.60 AvgScanTime:
0.41 sec
Ham: 56 Autolearn: 0 AvgScore: 0.66 AvgScanTime:
0.78 sec
Time Spent Running SA: 0.01 hours
Time Spent Processing Spam: 0.00 hours
Time Spent Processing Ham: 0.01 hours
TOP SPAM RULES FIRED
----------------------------------------------------------------------
RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM
----------------------------------------------------------------------
1 RDNS_NONE 15 100.00 100.00 100.00
2 FH_HELO_EQ_D_D_D_D 8 12.68 53.33 1.79
3 HELO_DYNAMIC_IPADDR2 7 11.27 46.67 1.79
4 HELO_DYNAMIC_HCC 5 7.04 33.33 0.00
5 STOX_REPLY_TYPE 4 15.49 26.67 12.50
6 SARE_RECV_SPAM_DOMN02 4 5.63 26.67 0.00
7 HELO_DYNAMIC_IPADDR 4 7.04 26.67 1.79
8 FUZZY_ERECT 3 4.23 20.00 0.00
9 HTML_MESSAGE 3 39.44 20.00 44.64
10 HELO_LOCALHOST 2 2.82 13.33 0.00
11 SARE_SPEC_REPLICA_OBFU 2 2.82 13.33 0.00
12 DATE_IN_PAST_96_XX 2 2.82 13.33 0.00
13 SARE_SPEC_ROLEX_NOV5A 2 2.82 13.33 0.00
14 SARE_SPEC_ROLEX 2 2.82 13.33 0.00
15 SARE_SUB_ENC_KOI8R 2 2.82 13.33 0.00
16 SARE_RECV_IP_FROMIP3 2 4.23 13.33 1.79
17 MSOE_MID_WRONG_CASE 1 1.41 6.67 0.00
18 ADVANCE_FEE_3 1 1.41 6.67 0.00
19 FM_SEX_HELODDDD 1 1.41 6.67 0.00
20 SARE_FRAUD_X4 1 1.41 6.67 0.00
----------------------------------------------------------------------
TOP HAM RULES FIRED
----------------------------------------------------------------------
RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM
----------------------------------------------------------------------
1 RDNS_NONE 56 0.00 0.00 0.00
2 HTML_MESSAGE 25 0.00 0.00 0.00
3 DK_SIGNED 17 0.00 0.00 0.00
4 SARE_SUB_OBFU_Q1 14 0.00 0.00 0.00
5 DK_POLICY_TESTING 8 0.00 0.00 0.00
6 DK_POLICY_SIGNALL 7 0.00 0.00 0.00
7 STOX_REPLY_TYPE 7 0.00 0.00 0.00
8 DK_VERIFIED 6 0.00 0.00 0.00
9 AWL 5 0.00 0.00 0.00
10 MIME_HTML_ONLY 3 0.00 0.00 0.00
11 HTML_IMAGE_RATIO_04 2 0.00 0.00 0.00
12 NORMAL_HTTP_TO_IP 2 0.00 0.00 0.00
13 SARE_OBFU_PART_ONA 2 0.00 0.00 0.00
14 MSGID_MULTIPLE_AT 2 0.00 0.00 0.00
15 HELO_LH_HOME 2 0.00 0.00 0.00
16 WEIRD_PORT 2 0.00 0.00 0.00
17 SARE_UN7 1 0.00 0.00 0.00
18 DATE_IN_PAST_03_06 1 0.00 0.00 0.00
19 SARE_SUB_ENC_UTF8x2 1 0.00 0.00 0.00
20 SARE_FROM_SPAM_PL1 1 0.00 0.00 0.00
----------------------------------------------------------------------
Every row in the HAM section has ZERO for all percentages?? I tried to
look at the perl code in /usr/sbin/sa-stats, but could not make out
what was wrong.
Martin
--
"What a fool believes he sees, no wise man has the power to reason
away..."
Doobie Brothers
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
