[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: URI_WPADMIN fp
From:       John Hardin <jhardin () impsec ! org>
Date:       2018-10-20 3:36:23
Message-ID: alpine.LNX.2.21.1810192034360.19734 () athena ! impsec ! org
[Download RAW message or body]

On Fri, 19 Oct 2018, Bill Cole wrote:

> On 19 Oct 2018, at 9:37, Alex wrote:
>
>> Hi,
>> 
>> Should we be adding 3 points for just this, or is there never a reason
>> users should be using /wp-admin in their URLs?
>
> The score is coming out of RuleQA, so the score is derived empirically, not 
> by a logical process based in arbitrary axioms.
>
> That doesn't mean it's the one true score for everyone, just that it's a 
> useful score in the context of the spam and ham corpora submitted to RuleQA. 
> If it causes actual FPs (i.e. ham that is identified as spam, NOT ham 
> identified as ham that happens to hit a strong spam rule but scores below the 
> threshold) then it is probably a good idea to limit its score in RuleQA or to 
> examine the FPs to find ways to narrow the rule. I see that John has the 
> basic rigging in place to allow for narrowing via meta conditions, so 
> presumably he anticipated the possibility.

Yup.

It's only hitting 80 spams and one ham in the current masscheck corpora. 
If it *is* causing FPs, please report here it as such and I'll reduce the 
score limit. It was hitting more when it was first created.


-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   One death is a tragedy; thirty is a media sensation;
   a million is a statistic.              -- Joseph Stalin, modernized
-----------------------------------------------------------------------
  568 days since the first commercial re-flight of an orbital booster (SpaceX)
[prev in list] [next in list] [prev in thread] [next in thread]