On 19.08.07 12:18, Leon Kolchinsky wrote:
> After an upgrade to SA3.2.2 I've noticed that I've started to get FP's from e-mail accounts originating at walla.com
>
> I can see that it may be wise to adjust some scores to make these FP get thru my system:
>
> score DNS_FROM_OPENWHOIS 0
> score DNS_FROM_RFC_DSN 0
>
> Do you think this is reasonable enough and I can spare these 2 scores?


imho both informations from those blacklist are very helpful since there are
many problems with sites not accepting bounces (RFCI_DSN) and not having
valid WHOIS informations (OPENWHOIS). I even refuse mail from sites at DSN
list at SMTP level.

I would better ask their admins (and force users to do the same) to fix
their behaviour, or ask users to move to different provider (is it a
provider?)

> Below are some scores from those FP mails:
> ------------------------------------------
> X-Spam-Status: Yes, score=7.575 tag=-999 tag2=5 kill=5 tests=[BAYES_20=-0.74,
> DNS_FROM_OPENWHOIS=1.13, DNS_FROM_RFC_DSN=1.495, HTML_MESSAGE=0.001,
> HTML_MIME_NO_HTML_TAG=0.097, MIME_BASE64_TEXT=1.753,
> MIME_HTML_ONLY=1.457, MPART_ALT_DIFF=0.739, RCVD_IN_NJABL_PROXY=1.643,
> SUBJ_ALL_CAPS=0]
>
> X-Spam-Status: Yes, score=6.673 tag=-999 tag2=5 kill=5 tests=[BAYES_50=0.001,
> DNS_FROM_OPENWHOIS=1.13, DNS_FROM_RFC_DSN=1.495, HTML_MESSAGE=0.001,
> HTML_MIME_NO_HTML_TAG=0.097, MIME_BASE64_TEXT=1.753,
> MIME_HTML_ONLY=1.457, MPART_ALT_DIFF=0.739, SUBJ_ALL_CAPS=0]
>
> X-Spam-Status: Yes, score=5.562 tag=-999 tag2=5 kill=5 tests=[BAYES_05=-1.11,
> DNS_FROM_OPENWHOIS=1.13, DNS_FROM_RFC_DSN=1.495, HTML_MESSAGE=0.001,
> HTML_MIME_NO_HTML_TAG=0.097, MIME_BASE64_TEXT=1.753,
> MIME_HTML_ONLY=1.457, MPART_ALT_DIFF=0.739]
>
> X-Spam-Status: Yes, score=6.673 tag=-999 tag2=5 kill=5 tests=[BAYES_50=0.001,
> DNS_FROM_OPENWHOIS=1.13, DNS_FROM_RFC_DSN=1.495, HTML_MESSAGE=0.001,
> HTML_MIME_NO_HTML_TAG=0.097, MIME_BASE64_TEXT=1.753,
> MIME_HTML_ONLY=1.457, MPART_ALT_DIFF=0.739, SUBJ_ALL_CAPS=0]
>
> X-Spam-Status: Yes, score=6.673 tag=-999 tag2=5 kill=5 tests=[BAYES_50=0.001,
> DNS_FROM_OPENWHOIS=1.13, DNS_FROM_RFC_DSN=1.495, HTML_MESSAGE=0.001,
> HTML_MIME_NO_HTML_TAG=0.097, MIME_BASE64_TEXT=1.753,
> MIME_HTML_ONLY=1.457, MPART_ALT_DIFF=0.739, SUBJ_ALL_CAPS=0]
>
> X-Spam-Status: Yes, score=5.514 tag=-999 tag2=5 kill=5 tests=[BAYES_00=-2.599,
> DNS_FROM_OPENWHOIS=1.13, DNS_FROM_RFC_DSN=1.495, FB_CIALIS_LEO3=1.441,
> HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.097,
> MIME_BASE64_TEXT=1.753, MIME_HTML_ONLY=1.457, MPART_ALT_DIFF=0.739]
>
> X-Spam-Status: Yes, score=5.619 tag=-999 tag2=5 kill=5 tests=[BAYES_00=-2.599,
> DNS_FROM_OPENWHOIS=1.13, DNS_FROM_RFC_DSN=1.495,
> HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001,
> HTML_MIME_NO_HTML_TAG=0.097, MIME_BASE64_TEXT=1.753,
> MIME_HTML_ONLY=1.457, MPART_ALT_DIFF=0.739, SUBJ_ALL_CAPS=0]


--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux IS user friendly, it's just selective who its friends are...