Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BAYES and other spam discrepancies in EFA5 #25

Open
gregecslo opened this issue Nov 6, 2024 · 0 comments
Open

BAYES and other spam discrepancies in EFA5 #25

gregecslo opened this issue Nov 6, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@gregecslo
Copy link

gregecslo commented Nov 6, 2024

Hi.

As per this post: https://forum.efa-project.org/viewtopic.php?t=5429

So, when doind spamassassinn -D test I have this:

`Nov 6 14:21:26.964 [1036654] dbg: bayes: tokenized body: 2737 tokens
Nov 6 14:21:26.965 [1036654] dbg: bayes: tokenized uri: 120 tokens
Nov 6 14:21:26.965 [1036654] dbg: bayes: tokenized invisible: 6 tokens
Nov 6 14:21:26.966 [1036654] dbg: bayes: tokenized header: 82 tokens
Nov 6 14:21:26.970 [1036654] dbg: bayes: tok_get_all: token count: 586
Nov 6 14:21:26.981 [1036654] dbg: bayes: score = 0.101741519786307

Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag BAYESTCHAMMY is now ready, value: 2
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag BAYESTCSPAMMY is now ready, value: 0
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag BAYESTCLEARNED is now ready, value: 2
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag BAYESTC is now ready, value: 586
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag HAMMYTOKENS is now ready, value: CODE(0x560baecc6878)
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag SPAMMYTOKENS is now ready, value: CODE(0x560baecc5750)
Nov 6 14:21:26.983 [1036654] dbg: check: tagrun - tag TOKENSUMMARY is now ready, value: CODE(0x560bac43f1e0)
Nov 6 14:21:26.984 [1036654] dbg: rules: ran eval rule BAYES_20 ======> got hit (1)

Nov 6 14:21:27.943 [1036654] dbg: check: tests=ALL_TRUSTED,BAYES_20,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,T_KAM_HTML_FONT_INVALID
Nov 6 14:21:27.943 [1036654] dbg: check: subtests=__ANY_IMAGE_ATTACH,__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,__BODY_TEXT_LINE(3),__COMMENT_EXISTS,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__CTYPE_MULTIPART_ANY,__DKIM_DEPENDABLE,__DKIM_EXISTS,__DOS_BODY_MON,__DOS_BODY_TUE,__DOS_BODY_WED,__DOS_HAS_ANY_URI,__DOS_LINK,__DOS_RCVD_WED,__DOS_REF_TODAY,__E_LIKE_LETTER(320),__FILL_THIS_FORM_FRAUD_PHISH1,__FROM_FULL_NAME,__FROM_WORDY,__GB_FAKE_RF,__GB_TO_ADDR,__HAS_ANY_EMAIL,__HAS_ANY_URI,__HAS_DATE,__HAS_DKIM_SIGHD,__HAS_FROM,__HAS_HREF(23),__HAS_HREF_ONECASE(23),__HAS_IN_REPLY_TO,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAS_THREAD_INDEX,__HAS_TNEF,__HAS_TO,__HAS_URI,__HAS_X_LOOP,__HAS_X_REF,__HIGHBITS,__HS_SUBJ_RE_FW,__HTML_LINK_IMAGE,__HTML_SINGLET(5),__HUSH_HUSH,__JM_REACTOR_DATE,__JPEG_ATTACH,__JPEG_ATTACH_2P,__KAM_HTML_FONT_INVALID,__LOCAL_PP_NONPPURL,__LOWER_E(230),__L_BODY_8BITS,__MIME_BASE64,__MIME_HTML,__MIME_VERSION,__MSGID_OK_HOST,__NONEMPTY_BODY,__NOT_SPOOFED,__PART_STOCK_CD_F,__PNG_ATTACH_2P,__RATWARE_0_TZ_DATE,__SANE_MSGID,__SINGLE_WORD_LINE(2),__SUBJ_NOT_SHORT,__SUBJ_RE,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TAG_EXISTS_STYLE,__THREADED,__TOCC_EXISTS,__TO_EQ_FM_DOM_HTML_IMG,__TO_EQ_FROM_DOM,__TO_EQ_FROM_DOM_1,__TVD_MIME_ATT_TP,__TVD_OUTLOOK_IMG,__URI_MAILTO(4),__YOUR_PERSONAL (Total Subtest Hits: 683 / Deduplicated Total Hits: 81)`

But in mailwatch I have:

Score Matching Rule Description -6.00 ALL_TRUSTED Passed through trusted hosts only via SMTP 0.10 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.50 DKIM_VALID Message has at least one valid DKIM or DK signature -1.00 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.10 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.00 HTML_MESSAGE HTML included in message 0.01 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML

  1. So, why debug has BAYES_20 and mailwatch report not?
  2. Why mailwatch report has DKIM_VALID_EF and debug has no such test?

image

Thanks!

@shawniverson shawniverson added the bug Something isn't working label Nov 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants