Am 26.09.2014 um 17:57 schrieb Matus UHLAR - fantomas: > On 25.09.14 16:07, Reindl Harald wrote: >> that's why BAYES_99 together with score BAYES_999 0.5 since >> it happens only very rare for legit mail and that ones >> have mostly whitelists, SPF, DKIM to keep the result below 8 >> >> score BAYES_00 -2.5 >> score BAYES_05 -0.7 >> score BAYES_20 -0.06 >> score BAYES_40 -0.03 >> score BAYES_50 2.0 >> score BAYES_60 3.0 >> score BAYES_80 3.7 >> score BAYES_95 5.8 >> score BAYES_99 7.5 >> score BAYES_999 0.5 > > FYI, the SA scores are currently these:
default, yes > score BAYES_00 0 0 -1.5 -1.9 > score BAYES_05 0 0 -0.3 -0.5 > score BAYES_20 0 0 -0.001 -0.001 > score BAYES_40 0 0 -0.001 -0.001 > score BAYES_50 0 0 2.0 0.8 > score BAYES_60 0 0 2.5 1.5 > score BAYES_80 0 0 2.7 2.0 > score BAYES_95 0 0 3.2 3.0 > score BAYES_99 0 0 3.8 3.5 > score BAYES_999 0 0 0.2 0.2 > > as you can see, they produce no score when BAYES is disabled (first two > numbers) well, if bayes is disabled bayes don't produce score :-) > I don't recommend you changing them, unless you know what you are doing (and > risking) i know - sa-milter here blocks above 8.0 and my bayse contains at the moment 3200 messages (half ham, half spam) manually trained messages with no autolearning in that environment 3.7 points are useless for 99.999% sure spam currently we reject around 30000 messages per day and aceept 3051 in fact nearly zero spam ever touchs a inbox and over 4 weeks 5 complaints about a false-positive, none of them SA related until there is no whitelist, SPF match and so on it is trusted to reject by train data and at the same time if other SA rules are hitted including a URIBL the -2.5 are trusted to prevent false positives just because some idiot sent legit mail to a blacklist instead hit the unsubscribe button what happens way too often frankly the biggest problem is the large amount of idiots hit a "spam" button whenever they can to stop receive some sort of mail - i had that even in my own family "can't you block that?" followed by "yes" after asking "have you subscribed there?" guess how likely it happens for a large mail provider sending 100% clean mail with double-optin to 10000 persons when there are 5% complete idiots - it results in 500 spam reports about the same message - the hardest job by maintaining a blacklist is to catch that idiots and prevent harm for innocent
signature.asc
Description: OpenPGP digital signature
