2 identical Phishing scams came in yesterday:...
My 2.63 production machine scored them at 11.5:...
I'm sure the "ALL_TRUSTED" isn't helping any, but that doesn't completely explain the 6.2 drop in score. Did all the tests that are common to the two scores/versions get lowered scores or something?!?
In a word: Bayes. Both messages triggered BAYES_99 on your 2.63 system, and neither triggered any Bayes rules on your 3.01 system. Mainly you need to train the Bayes database on your testbed machine. AWL also showed up in your 2.63 results.
As for tackling phishing, I recommend installing the SARE_SPOOF ruleset. It does a good job of catching a lot of these.
-- Kelson Vibber SpeedGate Communications <www.speed.net>
