You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Robert Menschel <Ro...@Menschel.net> on 2004/03/18 16:10:12 UTC

Re[2]: Stuggling with autolearning

Hello Deon,

Thursday, March 18, 2004, 2:27:01 AM, you wrote:

DdV> Hello Bob

DdV> Thanks for your response.

DdV> One more questions if I may:

DdV> Do you reckon my theory on autolearning lots of ham causing lots of spam
DdV> to start getting thru sounds feasible (as bizarre as it sounds while I
DdV> read it back to myself)?

Personally, no.  I suspect what happened instead is that spam sneaks
through autolearn as ham, since spammers continually try to find ways
past everyone's filters. If you don't catch and correct those, then
eventually there may be enough spam snuck through to allow other spam
through with low Bayes scores.

Bob Menschel


DdV> Thanks
DdV> Deon.

DdV> On Wed, 2004-03-17 at 04:39, Robert Menschel wrote:
>> Hello Deon,
>> 
>> Tuesday, March 16, 2004, 4:26:48 AM, you wrote:
>> 
>> DdV> Is it simply a matter of playing around with the autolearn
>> DdV> thresholds until I find a good balance?
>> 
>> Or better: playing around with the autolearn thresholds until you find
>> the ones that work for you (balance not necessary).
>> 
>> DdV> I would dearly like to utilise autolearning as I am running SA in a web
>> DdV> hosting environment and so have numerous servers hosting even more
>> DdV> numerous domains all talking to the same server via spamc/spamd and
>> DdV> hence utilising the same bayesian database.  If I can get autolearning
>> DdV> working then this seems to be the right way forward for me.
>> 
>> I use a non-spam threshold of -2 and a spam threshold of 20.
>> 
>> The non-spam of -2 ensures that spam which sneaks by hitting no rules
>> does not get wrongly learned as ham. I'm very happy with that setting. Of
>> course, it requires a number of negative-scoring rules in your local
>> configuration to work.
>> 
>> The spam threshold of +20 is probably a bit high. It catches a goodly
>> amount of spam, but could catch more if I lowered it. Since I manually
>> feed ALL spam and ham into sa-learn, auto-learned or not, refining that
>> latter threshold hasn't been a priority for me.
>> 
>> Bob Menschel




Re: Spamassasin dosent tagg e-mails with ***SPAM***

Posted by Duncan Hill <sa...@nacnud.force9.co.uk>.
On Thursday 18 March 2004 15:15, Bo-Lina teknisk support wrote:
> Hello.
>
>
> I Installed spamassasin and my config file looks like this as you se below.
> Why dosen't it tag e-mails that score more than 5.0 with ****SPAM**** ?

You have supplied no information about how you're actually using SpamAssassin, 
nor any other useful information such as headers from a mail that should have 
been scanned and tagged.

Based on this (lack of) information, I determine that the problem is (*checks 
BOFH calendar*) radiation emitted by the cosmic wind - cover your computer in 
foil and sacrifice a chicken.

Re: Spamassasin dosent tagg e-mails

Posted by Bo-Lina teknisk support <te...@bolina.hsb.se>.
Hi.

In Exim you can choose how much information you want to add to the header,
so we have narrowed it down a bit.
When i runt spamd in debug mode I se that the message gets analyzed there. "
./spamd -D "


----- Original Message ----- 
From: "Evan Platt" <ev...@espphotography.com>
To: <sp...@incubator.apache.org>
Sent: Thursday, March 18, 2004 5:23 PM
Subject: Re: Spamassasin dosent tagg e-mails


> At 07:46 AM 3/18/2004, you wrote:
> >Hello, here is a mail i just tested with.
> >This scores 6.0 and I have the treshold to 5.0.
> >Spamassasin should have added  ****SPAM*** to this mail.
> >Look at attached txt file.
>
> I'm definitely no spamassassin expert, but this doesn't look like SA's
> markup to me:
>
> X-Spam-Score: 6.0 (++++++)
> X-Spam-Flag: YES
> X-Spam-Report: Spam detection software, running on the system
"bolina03"...
>
> You're missing a line of "X-Spam-Checker-Version: SpamAssassin 2.61
(1.2.2)
> on ..."
>
> What version of spamassassin are you running? How is spamassassin being
called?
>
> The markup on your message looks like from another anti-spam program, but
I
> could be wrong...
>
> Evan
>
>
>


Re: Spamassasin dosent tagg e-mails

Posted by Evan Platt <ev...@espphotography.com>.
At 07:46 AM 3/18/2004, you wrote:
>Hello, here is a mail i just tested with.
>This scores 6.0 and I have the treshold to 5.0.
>Spamassasin should have added  ****SPAM*** to this mail.
>Look at attached txt file.

I'm definitely no spamassassin expert, but this doesn't look like SA's 
markup to me:

X-Spam-Score: 6.0 (++++++)
X-Spam-Flag: YES
X-Spam-Report: Spam detection software, running on the system "bolina03"...

You're missing a line of "X-Spam-Checker-Version: SpamAssassin 2.61 (1.2.2) 
on ..."

What version of spamassassin are you running? How is spamassassin being called?

The markup on your message looks like from another anti-spam program, but I 
could be wrong...

Evan 


Re: Spamassasin dosent tagg e-mails

Posted by Evan Platt <ev...@espphotography.com>.
At 07:46 AM 3/18/2004, you wrote:
>Hello, here is a mail i just tested with.
>This scores 6.0 and I have the treshold to 5.0.
>Spamassasin should have added  ****SPAM*** to this mail.
>Look at attached txt file.

Unfortunately I know nothing about Exim.  The SA installs and configs I've 
done are just SA being called via procmail. My guess is to look at Exim... 
but I could be wrong.

Evan 


Re: Spamassasin dosent tagg e-mails

Posted by Bo-Lina teknisk support <te...@bolina.hsb.se>.
Hello, here is a mail i just tested with.
This scores 6.0 and I have the treshold to 5.0.
Spamassasin should have added  ****SPAM*** to this mail.
Look at attached txt file.

//Regards Jonas

> At 07:15 AM 3/18/2004, you wrote:
> >Hello.
> >
> >
> >I Installed spamassasin and my config file looks like this as you se
below.
> >Why dosen't it tag e-mails that score more than 5.0 with ****SPAM**** ?
>
> Why not include the spamassassin headers for one of these messages?
>
> Thanks.
>
> Evan
>
>
>

Re: Spamassasin dosent tagg e-mails with ***SPAM***

Posted by Evan Platt <ev...@espphotography.com>.
At 07:15 AM 3/18/2004, you wrote:
>Hello.
>
>
>I Installed spamassasin and my config file looks like this as you se below.
>Why dosen't it tag e-mails that score more than 5.0 with ****SPAM**** ?

Why not include the spamassassin headers for one of these messages?

Thanks.

Evan 


Spamassasin dosent tagg e-mails with ***SPAM***

Posted by Bo-Lina teknisk support <te...@bolina.hsb.se>.
Hello.


I Installed spamassasin and my config file looks like this as you se below.
Why dosen't it tag e-mails that score more than 5.0 with ****SPAM**** ?


-----start config file ---
# How many hits before a message is considered spam.
required_hits           5.0

# Whether to change the subject of suspected spam
rewrite_subject         1

# Text to prepend to subject if rewrite_subject is used
subject_tag             *****SPAM*****

# Encapsulate spam in an attachment
report_safe             1

# Use terse version of the spam report
use_terse_report        0

# Enable the Bayes system
use_bayes               1

# Enable Bayes auto-learning
auto_learn              1

# Enable or disable network checks
skip_rbl_checks         0
use_razor2              0
use_dcc                 0
use_pyzor               0

# Mail using languages used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_languages            all

# Mail using locales used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_locales              all
-- end configfile --