SA 3.4.1 on FC22/sendmail with a .procmailrc not triiggering spamc

["kudyba@netzero.com" <ku...@netzero.com>]

We're running SA 3.4.1 with sendmail on Fedora Core 22. Every users has a .procmailrc upon creation of the user but we have some legacy users being inundated. If I just create a /etc/procmailrc will SA look at that first?  Does anyone have an example of a 2016-friendly local.cf file? Here are the contents of .procmailrc

cat /etc/skel/.procmailrc
VERBOSE=off
## VERBOSE=on
## MAILDIR=$HOME/mail (AGW)
## LOGFILE=$MAILDIR/from

## Silently drop all asian language mail
## This is here for reference only: the variable cannot be used in rules.
UNREADABLE='[^?"]*big5|iso-2022-jp|ISO-2022-KR|euc-kr|gb2312|ks_c_5601-1987'

##
:0:
* ? formail -x"From:" -x"From" -x"Sender:" | egrep -is -f $HOME/.whitelist
$ORGMAIL

##:0:
##* 1^0 $ ^Subject:.*=\?([^?"]*big5|iso-2022-jp|ISO-2022-KR|euc-kr|gb2312|ks_c_5601-1987)
##* 1^0 $ ^Content-Type:.*charset="?([^?"]*big5|iso-2022-jp|ISO-2022-KR|euc-kr|gb2312|ks_c_5601-1987|koi8-r|KOI8-R)
##mail/Caughtspam

##:0:
##* ^Content-Type:.*multipart
##* B ?? $ ^Content-Type:.*^?.*charset="?([^?"]*big5|iso-2022-jp|ISO-2022-KR|euc-kr|gb2312|ks_c_5601-1987|koi8-r|KOI8-R)
##mail/Caughtspam

:0fw:
| /usr/bin/spamc
:0:
* ^X-Spam-Status: Yes
mail/Caughtspam

:0HB:
* ? /usr/bin/bogofilter -p
mail/Caughtspam

:0:
____________________________________________________________
Nextiva vFAX
Why Do You Still Have An Old Fax Machine?
http://thirdpartyoffers.netzero.net/TGL3231/57582ecee7fca2ece2fb4st03duc

Re: SA 3.4.1 on FC22/sendmail with a .procmailrc not triiggering spamc

[Benny Pedersen <me...@junc.eu>]

On 2016-06-08 18:53, Joe Quinn wrote:

> Usually you don't want to be autolearning at all, and only train with
> messages that have been reviewed by a human. It's very easy for a
> Bayes DB to spiral out of control after even just one or two wrong
> results.

will setting this to -50 make it autolearn spam but disable nearly 
autolearn ham ?

learning manuel make just a harder work for bayes in the way it generate 
more digest to compare ?

Re: SA 3.4.1 on FC22/sendmail with a .procmailrc not triiggering spamc

[Joe Quinn <jq...@pccc.com>]

On 6/8/2016 12:39 PM, Kris Deugau wrote:
> kudyba@netzero.com wrote:
>> We're running SA 3.4.1 with sendmail on Fedora Core 22. Every users has a .procmailrc upon creation of the user but we have some legacy users being inundated. If I just create a /etc/procmailrc will SA look at that first?
> Usually.  However, it'll *also* be called before your non-legacy users'
> individual .procmailrc files.
>
> I would just either copy the standard file to your legacy users, or a
> minimal file with just the call to SA.
>
>> Does anyone have an example of a 2016-friendly local.cf file?
> I'm not sure what sort of advice you're looking for here, IME SA has
> been "pretty good" out of the box for the last few releases.
>
> About the only thing I'd recommend is if you intend to use autolearning
> with Bayes, to drop bayes_auto_learn_threshold_nonspam to at least -0.1;
>   the default 0.1 has a tendency to mislearn low-scoring spam as ham.
> (At one point the default was 0.7, but my experience was that any
> positive value tended to get spam autolearned as ham.)
>
> -kgd
Usually you don't want to be autolearning at all, and only train with 
messages that have been reviewed by a human. It's very easy for a Bayes 
DB to spiral out of control after even just one or two wrong results.

Re: SA 3.4.1 on FC22/sendmail with a .procmailrc not triiggering spamc

[Kris Deugau <kd...@vianet.ca>]

kudyba@netzero.com wrote:
> We're running SA 3.4.1 with sendmail on Fedora Core 22. Every users has a .procmailrc upon creation of the user but we have some legacy users being inundated. If I just create a /etc/procmailrc will SA look at that first?

Usually.  However, it'll *also* be called before your non-legacy users'
individual .procmailrc files.

I would just either copy the standard file to your legacy users, or a
minimal file with just the call to SA.

> Does anyone have an example of a 2016-friendly local.cf file?

I'm not sure what sort of advice you're looking for here, IME SA has
been "pretty good" out of the box for the last few releases.

About the only thing I'd recommend is if you intend to use autolearning
with Bayes, to drop bayes_auto_learn_threshold_nonspam to at least -0.1;
 the default 0.1 has a tendency to mislearn low-scoring spam as ham.
(At one point the default was 0.7, but my experience was that any
positive value tended to get spam autolearned as ham.)

-kgd