Defintiely custom.
FVGT_TRIPWIRE_* are add-on rules, and are not a part of the standard SA set.
TW_* are also add-on rules. In fact, I suspect they are a duplicate of the same ruleset, but with different names.
LOCAL_OBFU generic is a local customization. And a heavy hitter at 1.8 points.
SARE_HEAD_XBEEN is an add-on.
The only "standard" rule in the list of hits is BAYES_00, a nonspam rule.
As for James's concern about 9.9 vs 10.2 score, that much is easily accounted for by rounding. When you only print 2 digits, the actual number could be appreciably higher. ie: it could be 9.999, which makes the difference in total score 0.201 compared to 10.2.
With so many numbers in the addition, each printed as a rounded number, all the 0.1's could really 0.06's and that 0.04 points rounding adds up when there are 10 hits.. that could be a 0.4 point difference right there.
Don't be surprised when you get big errors when you add a large number or rounded numbers up when compared with adding all the numbers and then rounding. There's a lot of room for error there.. In fact, it could be as much as 0.0499 * the number of hits. With 29 numbers in the addition (I think that's how many there are here..) , that makes up to 1.4471 points of difference.
Round numbers are just that.. Adding lots of round numbers makes for a lot of rounding error.
At 07:08 PM 11/14/2004 +0100, Hanspeter Roth wrote:
Hello,
I have attached a message that has got 9.9 points. Is this score assinged by the default or by a custom configuration?
-Hanspeter
----- Forwarded message from Drew Tomlinson <> -----
From: Drew Tomlinson <> To: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: ****SPAM(9.9)**** shutdown -r Hangs After Upgrading to 4.10 Date: Sun, 07 Nov 2004 16:08:16 -0800 Message-Id: <[EMAIL PROTECTED]> X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on boogey.rootshell.be X-Spam-Level: ********* X-Spam-Status: Yes, score=9.9 required=4.0 tests=BAYES_00,FVGT_TRIPWIRE_BF, FVGT_TRIPWIRE_CB,FVGT_TRIPWIRE_DJ,FVGT_TRIPWIRE_FX,FVGT_TRIPWIRE_II, FVGT_TRIPWIRE_KB,FVGT_TRIPWIRE_NP,FVGT_TRIPWIRE_PF,FVGT_TRIPWIRE_SB, FVGT_TRIPWIRE_SK,FVGT_TRIPWIRE_TK,FVGT_TRIPWIRE_UH,FVGT_TRIPWIRE_XB, FVGT_TRIPWIRE_XC,FVGT_TRIPWIRE_XF,LOCAL_OBFU_GENERIC,SARE_HEAD_XBEEN, TW_BF,TW_CB,TW_DJ,TW_DR,TW_II,TW_SB,TW_SK,TW_UH,TW_XB,TW_XC,TW_XF autolearn=no version=3.0.0 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------=_418EB903.359B433A" Content-Length: 15125 Lines: 334
Checker-Version SpamAssassin 3.0.0 (2004-09-13) on boogey.rootshell.be Content analysis details: (9.9 points, 4.0 required, autolearn=no)
pts rule name description ---- ---------------------------------------------------------------- 0.1 TW_XC BODY: Odd Letter Triples with XC 1.8 LOCAL_OBFU_GENERIC BODY: Obfuscated 'GENERIC' in body 0.1 TW_BF BODY: Odd Letter Triples with BF 0.1 TW_II BODY: Odd Letter Triples with II 0.1 TW_UH BODY: Odd Letter Triples with UH 0.1 TW_DJ BODY: Odd Letter Triples with DJ 0.1 TW_XF BODY: Odd Letter Triples with XF 0.1 TW_XB BODY: Odd Letter Triples with XB 0.1 TW_SK BODY: Odd Letter Triples with SK 0.1 TW_CB BODY: Odd Letter Triples with CB 0.1 TW_SB BODY: Odd Letter Triples with SB 0.1 TW_DR BODY: Odd Letter Triples with DR -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% [score: 0.0000] -0.6 SARE_HEAD_XBEEN Mailng list header found, frequent ham sign 0.7 FVGT_TRIPWIRE_CB FVGT_TRIPWIRE_CB 0.7 FVGT_TRIPWIRE_PF FVGT_TRIPWIRE_PF 0.7 FVGT_TRIPWIRE_UH FVGT_TRIPWIRE_UH 0.7 FVGT_TRIPWIRE_II FVGT_TRIPWIRE_II 0.7 FVGT_TRIPWIRE_XC FVGT_TRIPWIRE_XC 0.7 FVGT_TRIPWIRE_NP FVGT_TRIPWIRE_NP 0.7 FVGT_TRIPWIRE_KB FVGT_TRIPWIRE_KB 0.7 FVGT_TRIPWIRE_SK FVGT_TRIPWIRE_SK 0.7 FVGT_TRIPWIRE_XB FVGT_TRIPWIRE_XB 0.7 FVGT_TRIPWIRE_BF FVGT_TRIPWIRE_BF 0.7 FVGT_TRIPWIRE_DJ FVGT_TRIPWIRE_DJ 0.7 FVGT_TRIPWIRE_FX FVGT_TRIPWIRE_FX 0.7 FVGT_TRIPWIRE_SB FVGT_TRIPWIRE_SB 0.7 FVGT_TRIPWIRE_XF FVGT_TRIPWIRE_XF 0.7 FVGT_TRIPWIRE_TK FVGT_TRIPWIRE_TK
Received: from mx2.freebsd.org (mx2.freebsd.org [216.136.204.119])
by boogey.rootshell.be (Postfix) with ESMTP id 4A1002D55F
for <[EMAIL PROTECTED]>; Mon, 8 Nov 2004 01:08:31 +0100 (CET)
Received: from hub.freebsd.org (hub.freebsd.org [216.136.204.18])
by mx2.freebsd.org (Postfix) with ESMTP
id 15C6257BA6; Mon, 8 Nov 2004 00:08:19 +0000 (GMT)
(envelope-from [EMAIL PROTECTED])
Received: from hub.freebsd.org (localhost [127.0.0.1])
by hub.freebsd.org (Postfix) with ESMTP
id 7CE5616A4EA; Mon, 8 Nov 2004 00:08:17 +0000 (GMT)
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP id 335AB16A4CE
for <freebsd-questions@freebsd.org>;
Mon, 8 Nov 2004 00:08:11 +0000 (GMT)
Received: from relay04.roc.ny.frontiernet.net (relay04.roc.ny.frontiernet.net
[66.133.131.37])
by mx1.FreeBSD.org (Postfix) with ESMTP id A005D43D48
for <freebsd-questions@freebsd.org>;
Mon, 8 Nov 2004 00:08:10 +0000 (GMT)
(envelope-from [EMAIL PROTECTED])
Received: from filter02.roc.ny.frontiernet.net
(filter02.roc.ny.frontiernet.net [66.133.131.177])
by relay04.roc.ny.frontiernet.net (Postfix) with ESMTP id 262D110285
for <freebsd-questions@freebsd.org>;
Mon, 8 Nov 2004 00:08:10 +0000 (UTC)
Received: from relay04.roc.ny.frontiernet.net ([66.133.131.37])
[66.133.131.177]) (amavisd-new, port 10024)
with LMTP id 14623-07-8 for <freebsd-questions@freebsd.org>;
Mon, 8 Nov 2004 00:08:10 +0000 (UTC)
Received: from blacklamb.mykitchentable.net
(67-137-46-138.dsl2.elk.ca.frontiernet.net [67.137.46.138])
by relay04.roc.ny.frontiernet.net (Postfix) with ESMTP id 1AD6C101A9
for <freebsd-questions@freebsd.org>;
Mon, 8 Nov 2004 00:08:08 +0000 (UTC)
Received: from [192.168.1.25] (lugalong.mykitchentable.net [192.168.1.25])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by blacklamb.mykitchentable.net (Postfix) with ESMTP id 298EB3BF356
for <freebsd-questions@freebsd.org>;
Sun, 7 Nov 2004 16:08:06 -0800 (PST)
Message-ID: <[EMAIL PROTECTED]>
Date: Sun, 07 Nov 2004 16:08:16 -0800
From: Drew Tomlinson <[EMAIL PROTECTED]>
User-Agent: Mozilla Thunderbird 0.8 (Windows/20040913)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: FreeBSD Questions <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new-20040701 (2.0) (Debian) at
filter02.roc.ny.frontiernet.net
Subject: shutdown -r Hangs After Upgrading to 4.10
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
<mailto:[EMAIL PROTECTED]>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
<mailto:[EMAIL PROTECTED]>
Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
I've been happily using 4.9-RELEASE-p4 since April 2004. Then, I decided to upgrade to 4.10-RELEASE-p3 to fix the pthreads problem since I added an external tape drive to the QLogic SCSI card that was already in my system.
Anyway, after upgrading, I experienced the same shutdown hanging symptoms as described in this message:
http://lists.freebsd.org/pipermail/freebsd-current/2003-December/016933.html
In reading the thread, it seems there was an infinite loop problem in the ahc driver code that was fixed later by Justin Gibbs. So I tried upgrading to 4-STABLE to see if the problem was fixed there. But I still have the same symptoms.
I also see these "odd" processes in my ps output:
root 34 0.0 0.0 212 40 ?? Is 10:19PM 0:00.00 adjkerntz root 20 0.0 0.0 596 48 ?? DLs 10:08PM 0:00.02 vinum root 13 0.0 0.0 0 0 ?? DL 10:08PM 0:00.04 vnlru root 12 0.0 0.0 0 0 ?? DL 10:08PM 0:01.39 syncer root 11 0.0 0.0 0 0 ?? DL 10:08PM 0:00.26 bufdaemon root 10 0.0 0.0 0 0 ?? DL 10:08PM 0:00.00 vmdaemon root 9 0.0 0.0 0 0 ?? DL 10:08PM 0:00.73 pagedaemon root 8 0.0 0.0 0 0 ?? DL 10:08PM 0:00.00 aic_recovery1 root 7 0.0 0.0 0 0 ?? DL 10:08PM 0:00.00 aic_recovery1 root 6 0.0 0.0 0 0 ?? DL 10:08PM 0:00.00 aic_recovery0 root 5 0.0 0.0 0 0 ?? DL 10:08PM 0:00.00 aic_recovery0 root 4 0.0 0.0 0 0 ?? DL 10:08PM 0:00.00 usbtask root 3 0.0 0.0 0 0 ?? DL 10:08PM 0:00.00 usb0 root 2 0.0 0.0 0 0 ?? DL 10:08PM 0:00.00 taskqueue root 1 0.0 0.1 552 128 ?? ILs 10:08PM 0:00.01 init root 0 0.0 0.0 0 0 ?? DLs 10:08PM 0:00.00 swapper
I find them "odd" because the system was powered off/on at 6:19AM after the machine was shutdown at about 10:08PM. (I tried waiting overnight to see if it would actually finish it's shutdown.)
And finally, I have one vinum volume that has problems. However after the system comes up, I can remove and re-create the volume and all of my data is intact.
I'm assuming that if I get the shutdown issue resolved, these other problems will heal themselves. I'd appreciate any advice you might have on how to get my system running on 4.10. My dmesg output follows. Please let me know if there's any other info I can provide.
Thanks,
Drew
----- blacklamb# uname -a FreeBSD blacklamb.mykitchentable.net 4.10-STABLE FreeBSD 4.10-STABLE #0: Sun Oct 31 21:23:11 PST 2004 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/BLACKLAMB i386
blacklamb# dmesg Copyright (c) 1992-2004 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.10-STABLE #0: Sun Oct 31 21:23:11 PST 2004 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/BLACKLAMB Timecounter "i8254" frequency 1193182 Hz CPU: Pentium III/Pentium III Xeon/Celeron (601.37-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x673 Stepping = 3
Features=0x387fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,PN,MMX,FXSR,SSE>
real memory = 201261056 (196544K bytes) config> # di pcic0 Invalid command or syntax. Type `?' for help. config> # di ata1 Invalid command or syntax. Type `?' for help. config> # di ata0 Invalid command or syntax. Type `?' for help. config> # di aic0 Invalid command or syntax. Type `?' for help. config> # di adv0 Invalid command or syntax. Type `?' for help. config> q avail memory = 191930368 (187432K bytes) Programming 24 pins in IOAPIC #0 IOAPIC #0 intpin 2 -> irq 0 FreeBSD/SMP: Multiprocessor motherboard: 2 CPUs cpu0 (BSP): apic id: 1, version: 0x00040011, at 0xfee00000 cpu1 (AP): apic id: 0, version: 0x00040011, at 0xfee00000 io0 (APIC): apic id: 2, version: 0x00170011, at 0xfec00000 Preloaded elf kernel "kernel" at 0xc03bb000. Preloaded userconfig_script "/boot/kernel.conf" at 0xc03bb09c. Preloaded elf module "ispfw.ko" at 0xc03bb0ec. Pentium Pro MTRR support enabled md0: Malloc disk Using $PIR table, 11 entries at 0xc00fdf10 npx0: <math processor> on motherboard npx0: INT 16 interface pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard IOAPIC #0 intpin 19 -> irq 2 IOAPIC #0 intpin 18 -> irq 5 IOAPIC #0 intpin 17 -> irq 10 IOAPIC #0 intpin 16 -> irq 11 pci0: <PCI bus> on pcib0 pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci0 pci1: <PCI bus> on pcib1 pci1: <ATI Mach64-GZ graphics accelerator> at 0.0 isab0: <Intel 82371AB PCI to ISA bridge> at device 4.0 on pci0 isa0: <ISA bus> on isab0 atapci0: <Intel PIIX4 ATA33 controller> port 0x1c90-0x1c9f at device 4.1 on pci0 ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0x1ca0-0x1cbf irq 2 at device 4.2 on pci0 usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0 usb0: USB revision 1.0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered Timecounter "PIIX" frequency 3579545 Hz chip1: <Intel 82371AB Power management controller> port 0xe800-0xe80f at device 4.3 on pci0 ahc0: <Adaptec aic7895 Ultra SCSI adapter> port 0x1000-0x10ff mem 0xfc100000-0xfc100fff irq 5 at device 5.0 on pci0 ahc0: Using left over BIOS settings aic7895C: Ultra Wide Channel A, SCSI Id=7, 32/253 SCBs ahc1: <Adaptec aic7895 Ultra SCSI adapter> port 0x1400-0x14ff mem 0xfc101000-0xfc101fff irq 5 at device 5.1 on pci0 ahc1: Host Adapter Bios disabled. Using default SCSI device parameters aic7895C: Ultra Wide Channel B, SCSI Id=7, 32/253 SCBs fxp0: <Intel 82559 Pro/100 Ethernet> port 0x1cc0-0x1cff mem 0xfc000000-0xfc0fffff,0xfc102000-0xfc102fff irq 2 at device 6.0 on pci0 fxp0: Ethernet address 00:e0:18:c4:f4:5e inphy0: <i82555 10/100 media interface> on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto isp0: <Qlogic ISP 1020/1040 PCI SCSI Adapter> port 0x1800-0x18ff mem 0xfc103000-0xfc103fff irq 10 at device 9.0 on pci0 fwohci0: <VIA VT6306> port 0x1c00-0x1c7f mem 0xfc104000-0xfc1047ff irq 11 at device 10.0 on pci0 fwohci0: OHCI version 1.0 (ROM=1) fwohci0: No. of Isochronous channel is 8. fwohci0: EUI64 00:40:63:00:00:00:07:ff fwohci0: Phy 1394a available S400, 3 ports. fwohci0: Link S400, max_rec 2048 bytes. firewire0: <IEEE1394(FireWire) bus> on fwohci0 sbp0: <SBP-2/SCSI over FireWire> on firewire0 fwe0: <Ethernet over FireWire> on firewire0 if_fwe0: Fake Ethernet address: 02:40:63:00:07:ff fwohci0: Initiate bus reset fwohci0: node_id=0xc800ffc1, gen=1, CYCLEMASTER mode firewire0: 2 nodes, maxhop <= 1, cable IRM = 1 (me) firewire0: bus manager 1 (me) pcib2: <DEC 21152 PCI-PCI bridge> at device 12.0 on pci0 pci2: <PCI bus> on pcib2 orm0: <Option ROMs> at iomem 0xc0000-0xc7fff,0xc8000-0xcd7ff on isa0 pmtimer0 on isa0 fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0 vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 sc0: <System console> at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x100> sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A, console sio1 at port 0x2f8-0x2ff irq 3 on isa0 sio1: type 16550A ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0 ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode lpt0: <Printer> on ppbus0 lpt0: Interrupt-driven port ppi0: <Parallel I/O> on ppbus0 APIC_IO: Testing 8254 interrupt delivery APIC_IO: routing 8254 via IOAPIC #0 intpin 2 SMP: AP CPU #1 Launched! ad0: 76319MB <GENERIC GENERIC> [155061/16/63] at ata0-master UDMA33 ad1: 76319MB <WDC WD800AB-22CBA0> [155061/16/63] at ata0-slave UDMA33 acd0: CDROM <HITACHI CDR-8435> at ata1-master PIO4 Waiting 10 seconds for SCSI devices to settle firewire0: New S400 device ID:00d04b0ce0100707 sa0 at isp0 bus 0 target 6 lun 0 sa0: <DEC DLT2000 840F> Removable Sequential Access SCSI-2 device sa0: 3.300MB/s transfers da0 at ahc0 bus 0 target 0 lun 0 da0: <SEAGATE SX19171W 9D32> Fixed Direct Access SCSI-2 device da0: 11.626MB/s transfers (5.813MHz, offset 8, 16bit), Tagged Queueing Enabled da0: 8683MB (17783112 512 byte sectors: 64H 32S/T 8683C) da1 at ahc0 bus 0 target 2 lun 0 da1: <SEAGATE SX19171W 9D32> Fixed Direct Access SCSI-2 device da1: 11.626MB/s transfers (5.813MHz, offset 8, 16bit), Tagged Queueing Enabled da1: 8683MB (17783112 512 byte sectors: 64H 32S/T 8683C) da2 at sbp0 bus 0 target 0 lun 0 da2: <Oxford 911G 0135> Fixed Simplified Direct Access SCSI-4 device da2: 50.000MB/s transfers da2: 76351MB (156368016 512 byte sectors: 255H 63S/T 9733C) Mounting root from ufs:/dev/da0s1a vinum: drive backup is down vinum: removing backup.p0.s0 vinum: backup.p0 is up vinum: backup is up vinum: removing backup.p0 vinum: backup is down vinum: removing backup vinum: drive backup is up vinum: backup.p0.s0 is up vinum: backup.p0 is up vinum: backup is up
_______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
----- End forwarded message -----
