Thank you very much for your reply!
Actually I am using 2.62, and this is what I get in a typical spam/virus message:
* 1.6 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51 and 100
* [cf: 100]
* 0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Basically, would I be doing a huge mistake if a raised the 51-100% point to, say 4?
Kelson Vibber wrote:
At 09:47 AM 7/12/2004, =?ISO-8859-2?Q?Jaka_Jan=E8ar?= wrote:
how come that mails listed in Razor get only +1.6 points? Is razor not to be trusted? I'd think, that if the hash is listed, it's 100% spam, and as that it should get like +100 :/
I assume you're talking about SA 3.0, since 1.6 doesn't match any of the scores in my SA 2.63 install, but assuming they haven't changed the *setup*, there are actually three Razor rules that, when combined, can score anywhere from 0.9 to 2.4.
There's one rule, RAZOR2_CHECK, that just looks at whether Razor considers the message as spam. Then there are two other rules, RAZOR2_CF_RANGE_11_50 and RAZOR2_CF_RANGE_51_100, that check the confidence level Razor assigns the message. So if Razor thinks there's a 90% chance the message is spam, it gets a higher score than if Razor thinks there's a 20% chance.
As for Razor's trustworthiness, there have been some issues in the past with false positives, but they're generally rare. There was a brief spike last week with the release of the new razor program, and someone keeps reporting Mandrake Linux security advisories, but for the most part I've found it quite effective.
As for how the scores are chosen, check out http://wiki.apache.org/spamassassin/HowScoresAreAssigned
Kelson Vibber SpeedGate Communications <www.speed.net>
