Deleting Spam (Linux & Procmail)

[Mark <ma...@manngo.net>]

Hi All

I'm new to the list, so I hope this is the right place.

I am running my mail through procmail and separating my spamassassin 
into 3 groups depending on score:

    X-Spam-Status: Yes, score=[2-9][0-9]
    X-Spam-Status: Yes, score=[0-9][0-9]
    X-Spam-Status: Yes

I reason that this must be in order of confidence. I have found that the 
first group (score>=20) contains more than half of my spam. The last 
group (score<10) contains about 1/10 of the spam.

Would others agree that I can safely get procmail to trash the scores 
higher than 10?

Thanks,

Mark

Re: Deleting Spam (Linux & Procmail)

[mouss <mo...@netoyen.net>]

Matus UHLAR - fantomas wrote:
>> On Thursday 11 October 2007, Mark wrote:
>>     
>>> I'm new to the list, so I hope this is the right place.
>>>
>>> I am running my mail through procmail and separating my spamassassin
>>> into 3 groups depending on score:
>>>
>>>    X-Spam-Status: Yes, score=[2-9][0-9]
>>>    X-Spam-Status: Yes, score=[0-9][0-9]
>>>    X-Spam-Status: Yes
>>>
>>> I reason that this must be in order of confidence. I have found that the
>>> first group (score>=20) contains more than half of my spam. The last
>>> group (score<10) contains about 1/10 of the spam.
>>>
>>> Would others agree that I can safely get procmail to trash the scores
>>> higher than 10?
>>>       
>
> On 11.10.07 05:23, Gene Heskett wrote:
>   
>> I've been sending that stuff to /dev/null at >7, no false hits so far 
>> according to the procmail.log.  My bayes is fairly well trained.
>>     
>
> We (ISP I work for) had complaints when the messages scored over 7 were
> refused. I have even seen some messages that could be taken as false
> positives scoring a 11.
>   
> However I take refusal with score over 10 as safe. Some people just have to
> fix their submission agents (usually PHP scripts who don't care about proper
> encoding and splitting lines)
>
>   

refusal (at smtp time) is ok. but OP is about discarding. This is
generally less acceptable. If it's one's mail, then one is free to do
whatever he wants. but if it's other people's mail, he should ask them
(after explaining the risks).

Re: Deleting Spam (Linux & Procmail)

[Matus UHLAR - fantomas <uh...@fantomas.sk>]

> On Thursday 11 October 2007, Mark wrote:
> >I'm new to the list, so I hope this is the right place.
> >
> >I am running my mail through procmail and separating my spamassassin
> >into 3 groups depending on score:
> >
> >    X-Spam-Status: Yes, score=[2-9][0-9]
> >    X-Spam-Status: Yes, score=[0-9][0-9]
> >    X-Spam-Status: Yes
> >
> >I reason that this must be in order of confidence. I have found that the
> >first group (score>=20) contains more than half of my spam. The last
> >group (score<10) contains about 1/10 of the spam.
> >
> >Would others agree that I can safely get procmail to trash the scores
> >higher than 10?

On 11.10.07 05:23, Gene Heskett wrote:
> I've been sending that stuff to /dev/null at >7, no false hits so far 
> according to the procmail.log.  My bayes is fairly well trained.

We (ISP I work for) had complaints when the messages scored over 7 were
refused. I have even seen some messages that could be taken as false
positives scoring a 11.

However I take refusal with score over 10 as safe. Some people just have to
fix their submission agents (usually PHP scripts who don't care about proper
encoding and splitting lines)

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Saving Private Ryan...
Private Ryan exists. Overwrite? (Y/N)

Re: Deleting Spam (Linux & Procmail)

[Gene Heskett <ge...@verizon.net>]

On Thursday 11 October 2007, Mark wrote:
>Hi All
>
>I'm new to the list, so I hope this is the right place.
>
>I am running my mail through procmail and separating my spamassassin
>into 3 groups depending on score:
>
>    X-Spam-Status: Yes, score=[2-9][0-9]
>    X-Spam-Status: Yes, score=[0-9][0-9]
>    X-Spam-Status: Yes
>
>I reason that this must be in order of confidence. I have found that the
>first group (score>=20) contains more than half of my spam. The last
>group (score<10) contains about 1/10 of the spam.
>
>Would others agree that I can safely get procmail to trash the scores
>higher than 10?
>
>Thanks,
>
>Mark

I've been sending that stuff to /dev/null at >7, no false hits so far 
according to the procmail.log.  My bayes is fairly well trained.

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Q:	Why is it that Mexico isn't sending anyone to the '84 summer games?
A:	Anyone in Mexico who can run, swim or jump is already in LA.