In my experience the razor server never, ever, reports back any matches that have a cf below 0, so I suspect any "known" signatures with a negative cf aren't reported back to the client at all. (note that a cf of 0 is supposed to be "average" and CF's range from +100 to -100)
If I bump up my min_cf to 10, the razor server still reports back starting at 0, but my client will then decide to not call anything between 0 and 9 spam.
So it is possible that the razor server has the sig for the email you've reported, but is waiting till some other people report it as well to have enough CF to call it spam..
From the trimmed down debug output you gave, it does look like the same mail is going in to report as check. Someone more expert on how razor really works will likely have to make some better interpretations of this debug data, or at least have questions/observations.
At 04:51 PM 1/16/2003 -0600, Eugene Pivovarov wrote:
I have found a copy of the spam of 12/30/02. The message is Base64-encoded and is unmodified. BTW I have installed DCC and it is marked as bulk there (Fuz2=many). When I run razor-check -d, it says[ 8] Client supported_engines: 1 2 3 4 [ 8] prep_mail done: mail 1 headers=498, mime0=2994 [ 8] mail 1 Subject: Good news for eugenep [ 6] preproc: mail 1.0 went from 2994 bytes to 359 [ 5] Connecting to truth.cloudmark.com ... [ 8] Computed supported_engines: 2 4 [ 6] mail 1.0 e=2 sig=qxkKXVP5uPLNCmV3db4_MIbTZWsA: sig not found. [ 6] mail 1.0 e=4 sig=qxkKXVP5uPLNCmV3db4_MIbTZWsA: sig not found. [ 3] mail 1 is not known spam. Thus, the signature is not even found there! I ran razor-report -d again and it said [ 5] Connecting to hubris.cloudmark.com ... [ 8] Computed supported_engines: 1 2 4 [ 6] -a=r&e=1&s=_pqrIOzr__hOkQSDTXFeAQ7CrwMA a=r&e=4&ep4=7542-10&s=qxkKXVP5uPLNCmV3db4_MIbTZWsA [ 5] mail 1, orig_email, special case eng 1: Server accepted report. [ 5] mail 1.0, eng 4: Server accepted report. [ 3] Finished report. Two hours later I ran razor-check -d once more, still "sig not found."
-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com
Understand how to protect your customers personal information by implementing
SSL on your Apache Web Server. Click here to get our FREE Thawte Apache Guide: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0029en
_______________________________________________
Razor-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/razor-users
