I attach a perl file that may help you identify where scores come from. Isolate the offending email (with SA markup) and run the email message into the perl program: perl perltest <email.message
It will print the tests, scores and total score.
It will attempt to look in /usr/share/spamassassin and
/etc/mail/spamassassin..
if these are not your setup directories, you can edit the program to suit your site.
Anthony
Alicia Forsythe wrote:
I just cought an FP where the SUBJ_HAS_SPACES rule gave 3.5 points. My local.cf has no reference to this rule, but I did find it in 50_scores.cf: SUBJ_HAS_SPACES 2.425 2.026 1.101 2.329. Where is the 3.5 coming from? I need to lower this score right away.
X-Mail-Format-Warning: Bad RFC2822 header formatting in MAIL
From:<[EMAIL PROTECTED]>
X-Mail-Format-Warning: Bad RFC2822 header formatting in RCPT
To:<[EMAIL PROTECTED]>
X-GWIA: Thu, 11 Sep 2003 12:33:37 -0400; imo-r05.mx.aol.com
Received: from imo-r05.mx.aol.com [152.163.225.101]
by ns1.mshs.com; Thu, 11 Sep 2003 12:33:37 -0400
Received: from [EMAIL PROTECTED] by imo-r05.mx.aol.com (mail_out_v36_r1.1.) id d.30.4697ad6f
(3988)
for <[EMAIL PROTECTED]>; Thu, 11 Sep 2003 12:33:33
-0400 (EDT)
From: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]>
Date: Thu, 11 Sep 2003 12:33:33 EDT
To: [EMAIL PROTECTED] MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Mailer: AOL 5.0 for Windows sub 106
X-Spam-Status: Yes, hits=5.7 required=5.0
tests=BAYES_60,NO_REAL_NAME,SUBJ_HAS_SPACES
version=2.55
X-Spam-Level: *****
X-Spam-Checker-Version: SpamAssassin 2.55
(1.174.2.19-2003-05-19-exp)50_scores.cf contains the following info
:SUBJ_HAS_SPACES 2.425 2.026 1.101 2.329
Content analysis details: (5.70 points, 5 required)
NO_REAL_NAME (1.1 points) From: does not include a real name
SUBJ_HAS_SPACES (3.5 points) Subject contains lots of white
space
BAYES_60 (1.1 points) BODY: Bayesian classifier says spam
probability is 60 to 70%
[score: 0.6585]
X-Spam-Flag: YES
Ali Forsythe
Motor-Services Hugo Stamp, Inc. - ISO 9002 LR
3190 SW 4th Avenue
Ft. Lauderdale, FL 33315 Ph: (954) 763 3660 Fx: (954) 763 2872
Please visit our website http://www.mshscompanies.com
------------------------------------------------------------------------
BEGIN:VCARD VERSION:2.1 X-GWTYPE:USER FN:Alicia Forsythe TEL;WORK:954-763-3660 TEL;PREF;FAX:954-763-2872 EMAIL;WORK;PREF;NGW:[EMAIL PROTECTED] X-GWUSERID:Alicia TEL;CELL:954-821-4866 ORG:Motor-Services Hugo Stamp, Inc. N:Forsythe;Alicia TEL;PREF:954-763-3660 X-GWDOMAIN:MSHS_DOM X-GWPO:MSHS_PO UID:0E9C5470-89EC-0047-BB64-78011400D0A4 X-GWIDOMAIN:mshs.com X-GWADDRFMT:4 END:VCARD
-- Anthony McCarthy [EMAIL PROTECTED]
#!/usr/bin/perl # the usual GPL applies # Anthony McCarthy # [EMAIL PROTECTED] # my @snet = ""; my @slocal = "";
$filename = "/usr/share/spamassassin/50_scores.cf" ;
&getinput;
@file=`ls /etc/mail/spamassassin/*.cf`;
#print @file;
foreach $filename (@file) {
#print "$filename\n";
chomp($filename);
&getinput;
}
#
$sasum=0;
while (<>) {
if (/tests=/) { $mark = 1;}
if (/version=/) { $mark = 0;}
if ($mark) {
$line = $_ ;
$line =~ s/^.*tests=// ;
@s=split(",",$line);
foreach $j (@s) {
if ( ! $j ) {next;}
if ( $j eq "\n" ) {next;}
if ( $j eq "" ) {next;}
while ( $j =~ / |\t/ ) { $j =~ s/ |\t// ;}
chomp($j);
$sasum += $snet{$j} ;
print $j," ",$snet{$j},"\n";
}
}
}
print "$sasum\n";;
exit;
sub getinput {
open (FO,"$filename");
@l=<FO>;
close (FO);
foreach $i (@l){
if ($i =~ /score/ ) {
@e=split(/ /,$i);
chomp($e[1]);
if ( ! $e[1] ) {next;}
$slocal{$e[1]}=$e[2];
if ( ! $e[3] ) { $e[3] = $e[2] ;}
$snet{$e[1]}=$e[3];
chomp($snet{$e[1]});
#print "$filename $i\n";
#print "$e[0] $e[1] $e[2]\n";
}
}
}
