You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Pat Traynor <pa...@ssih.com> on 2010/11/03 14:24:50 UTC
Learing spam/ham with Pine
This is certainly a newbie question for all of you out there, but I
really don't know where I should be asking this.
I've been running Spamassassin on my linux server for some time, and I
use Pine to read my mail. I suspect that Spamassassin isn't learning
from spam that's coming through if I don't alert it to false positives
or missed spam, but I simply don't know how to do that.
Can someone tell me (or point me to instructions) on what steps I should
take to do this? I would imagine some of it involves redirecting spam
from my inbox to a "spam" file. I'm not looking for something that's
site-wide. This is just for my account.
Thanks for any help.
--pat--
--
Pat Traynor
pat@ssih.com
Re: [sa-list] Re: Learing spam/ham with Pine
Posted by John Hardin <jh...@impsec.org>.
On Sat, 6 Nov 2010, Dan Mahoney, System Admin wrote:
> 2) While John's methods for learning and reporting spam work, I've found that
> the best way to do it is per-message within spamassassin, via spamd/spamc.
> The "pipe" command returns MUCH faster in this config.
Interactively moving the messages to a training folder and learning
from that folder asynchronously returns even faster.
Or am I misinterpreting what you're suggesting?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
"Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
does quite what I want. I wish Christopher Robin was here."
-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
Tomorrow: Daylight Saving Time ends in U.S. - Fall Back
Re: [sa-list] Re: Learing spam/ham with Pine
Posted by "Dan Mahoney, System Admin" <da...@prime.gushi.org>.
On Wed, 3 Nov 2010, John Hardin wrote:
> On Wed, 3 Nov 2010, Pat Traynor wrote:
>
>> I've been running Spamassassin on my linux server for some time, and I
>> use Pine to read my mail.
>
> Hello, fellow fossil!
Aah, yonder fossils. I've found, by the way, that if you're not using
Alpine, you sure should be. Better bits, and some cool new features. I
consider myself a pine power user.
So, things to know.
1) If you're using pine and not procmail, you're missing out. Learn it,
live it, love it.
2) While John's methods for learning and reporting spam work, I've found
that the best way to do it is per-message within spamassassin, via
spamd/spamc. The "pipe" command returns MUCH faster in this config.
(Make no mistake, there's nothing wrong with periodically feeding your
spam and ham folders to bayes as well, but I have a personal policy of
"report what gets through the filters to improve the system".
3) While you're at it, if you're using spamc/spamd, take whatever account
they're registered under, and tie them to DCC/Pyzor/Razor -- if you're
reporting, you might as well get the most bang for your buck. If you're
not using them, then register yourself a Pyzor/Razor/DCC account. It's
quick and easy.
Anyway, you'll need to go into your pine options and turn on the
following:
* Enable Aggregate Command Set (this allows you to select and act on
multiple messages at once)
* Enable unix pipe command
>From there, you can simply take any message (or any group of messages) and
press "|" to start a pipe, and set the following options:
* Raw Message
* Uncaptured output
* If working with multiple messages, set the "new pipe" option so each
message gets fed to a separate copy of the command, and for the command
itself, I put:
/usr/local/bin/spamc -d quark.gushi.org --reporttype=report
or
/usr/local/bin/spamassassin --report
If you want to correct a false positive, chance --"report" to "revoke"
--
--------Dan Mahoney--------
Techie, Sysadmin, WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144 AIM: LarpGM
Site: http://www.gushi.org
---------------------------
Re: Learing spam/ham with Pine
Posted by Pat Traynor <pa...@ssih.com>.
Thanks, John. I'm teaching spamassassin now!
--pat--
On Wed, 3 Nov 2010, John Hardin wrote:
> On Wed, 3 Nov 2010, Pat Traynor wrote:
>
>> On Wed, 3 Nov 2010, John Hardin wrote:
>>
>>> Take a look under http://www.impsec.org/antispam/ for some scripting for
>>> user-directed training in that sort of environment. Each user needs a
>>> SpamAssassin-HAM and SpamAssassin-SPAM folder.
>>
>> Thanks for the reply!
>>
>> I'm getting a "not found" at that address.
>
> Dangit. Insufficient caffiene. Try this:
>
> http://www.impsec.org/~jhardin/antispam/
>
> --
> John Hardin KA7OHZ http://www.impsec.org/~jhardin/
> jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
> key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
> "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
> does quite what I want. I wish Christopher Robin was here."
> -- Peter da Silva in a.s.r
> -----------------------------------------------------------------------
> 4 days until Daylight Saving Time ends in U.S. - Fall Back
>
--pat--
--
Pat Traynor
pat@ssih.com
Re: Learing spam/ham with Pine
Posted by John Hardin <jh...@impsec.org>.
On Wed, 3 Nov 2010, Pat Traynor wrote:
> On Wed, 3 Nov 2010, John Hardin wrote:
>
>> Take a look under http://www.impsec.org/antispam/ for some scripting for
>> user-directed training in that sort of environment. Each user needs a
>> SpamAssassin-HAM and SpamAssassin-SPAM folder.
>
> Thanks for the reply!
>
> I'm getting a "not found" at that address.
Dangit. Insufficient caffiene. Try this:
http://www.impsec.org/~jhardin/antispam/
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
"Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
does quite what I want. I wish Christopher Robin was here."
-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
4 days until Daylight Saving Time ends in U.S. - Fall Back
Re: Learing spam/ham with Pine
Posted by Pat Traynor <pa...@ssih.com>.
On Wed, 3 Nov 2010, John Hardin wrote:
> Take a look under http://www.impsec.org/antispam/ for some scripting for
> user-directed training in that sort of environment. Each user needs a
> SpamAssassin-HAM and SpamAssassin-SPAM folder.
Thanks for the reply!
I'm getting a "not found" at that address.
--pat--
--
Pat Traynor
pat@ssih.com
Re: Learing spam/ham with Pine
Posted by John Hardin <jh...@impsec.org>.
On Wed, 3 Nov 2010, Pat Traynor wrote:
> I've been running Spamassassin on my linux server for some time, and I
> use Pine to read my mail.
Hello, fellow fossil!
> I suspect that Spamassassin isn't learning from spam that's coming
> through if I don't alert it to false positives or missed spam, but I
> simply don't know how to do that.
Take a look under http://www.impsec.org/antispam/ for some scripting for
user-directed training in that sort of environment. Each user needs a
SpamAssassin-HAM and SpamAssassin-SPAM folder.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
"Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
does quite what I want. I wish Christopher Robin was here."
-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
4 days until Daylight Saving Time ends in U.S. - Fall Back
Re: Learing spam/ham with Pine
Posted by Shane Williams <sh...@shanew.net>.
I do this by piping messages (either singly or in muliples) to
spamassassin -r or -k as appropriate.
You may need to enable the ability to use unix pipes, which can be
done within the pine setup, or by adding the "enable-unix-pipe-cmd" in
the feature-list section of your .pinerc.
On Wed, 3 Nov 2010, Pat Traynor wrote:
> This is certainly a newbie question for all of you out there, but I
> really don't know where I should be asking this.
>
> I've been running Spamassassin on my linux server for some time, and I
> use Pine to read my mail. I suspect that Spamassassin isn't learning
> from spam that's coming through if I don't alert it to false positives
> or missed spam, but I simply don't know how to do that.
>
> Can someone tell me (or point me to instructions) on what steps I should
> take to do this? I would imagine some of it involves redirecting spam
> from my inbox to a "spam" file. I'm not looking for something that's
> site-wide. This is just for my account.
>
> Thanks for any help.
>
> --pat--
>
--
Public key #7BBC68D9 at | Shane Williams
http://pgp.mit.edu/ | System Admin - UT iSchool
=----------------------------------+-------------------------------
All syllogisms contain three lines | shanew@shanew.net
Therefore this is not a syllogism | www.ischool.utexas.edu/~shanew