SA 3.1.0 scoring a lot of messages on this list rather high..

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Glenn Steen wrote:

>On 03/12/05, Dhawal Doshy <dhawal at netmagicsolutions.com> wrote:
>  
>
>>Matt Kettler wrote:
>>    
>>
>>>It would appear that references to the wiki cause a strong-scoring SA 3.1.0 rule
>>>to fire off. "URI_NO_WWW_INFO_CGI", which matches URIs to CGI scripts in the
>>>info tld that don't start with www.  wiki.mailscanner.info matches the hostname
>>>requirements, and direct links to various PHP sub-pages containing a ? cause a
>>>match for the cgi part.
>>>
>>>
>>>This rule scores rather high, particularly for set3 users:
>>>score URI_NO_WWW_INFO_CGI 3.280 3.241 3.792 4.100
>>>
>>>And it double-fires with INFO_TLD:
>>>
>>>score INFO_TLD 1.373 0.813 1.457 1.273
>>>
>>>Giving messages with links to the wiki a >5.3 point penalty just for linking
>>>articles in the wiki (rather harsh).  This is contributing to some FPs on this
>>>list.
>>>
>>>Users might want to check and either whitelist this list, or adjust the scores
>>>of those rules.
>>>      
>>>
>>If it helps anyone, i am using these 2 lines in my sa prefs to whitelist
>>the list.
>>
>>whitelist_from_rcvd owner-mailscanner at jiscmail.ac.uk ictmailer1.itd.rl.ac.uk
>>bayes_ignore_from owner-mailscanner at jiscmail.ac.uk
>>
>>- dhawal
>>
>>    
>>
>
>With the risk of reopening the debate of what shoud go in
>mailscanner.cf, or not... Wouldn't that be rather nice defaults for
>Jules to add? Or perhaps after any move of the list, amended to the
>new service .....:)
>
Good idea. Once the list is moved, I'll try to remember to do this.

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.3 (Build 2932)

iQA/AwUBQ5HeVhH2WUcUFbZUEQLJaQCghrcXz2offOlil9AhWHXoAz9XP1EAnRJ7
pu3TYdT6RC7WgJaQNjZI3MRH
=bWUE
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!