You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Ky...@transplace.com on 2005/01/20 16:52:20 UTC

sa-learn with lotus notes

Help...  I need to feed spam and ham to sa-learn.  We are using lotus notes
R5 and I need to get the messages into a format that sa-learn can use.  The
closest I have found is to export messages as "structured text", and this
exports multiple messages as one file, the example below is how they are
exported...  Is this usable by sa-learn?  Any suggestions?  Thanks for the
advice.

************************************************************************************************************************************************************************************

Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009223223:23490 ;          Thu, 20 Jan 2005 09:22:32 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 110623455278; Thu, 20 Jan 2005
09:22:32 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
01B1A11447; Thu, 20 Jan 2005 09:22:31 -0600 (CST)
Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
smtp.transplace.com (Postfix) with SMTP id D786E1146A for
<Ky...@transplace.com>; Thu, 20 Jan 2005 09:22:30 -0600 (CST)
Received:  (qmail 19329 invoked by uid 500); 20 Jan 2005 15:22:09 -0000
Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
Precedence:  bulk
list_help:  <ma...@spamassassin.apache.org>
list_unsubscribe:  <ma...@spamassassin.apache.org>
list_post:  <ma...@spamassassin.apache.org>
List_Id:  <users.spamassassin.apache.org>
Delivered_To:  mailing list users@spamassassin.apache.org
Received:  (qmail 19226 invoked by uid 99); 20 Jan 2005 15:22:08 -0000
X_ASF_Spam_Status:  No, hits=0.0 required=10.0
tests=HTML_60_70,HTML_MESSAGE
X_Spam_Check_By:  apache.org
Received_SPF:  pass (hermes.apache.org: local policy)
Received:  from mail.lastar.com (HELO server11.lastar.com) (65.89.139.10)
by apache.org (qpsmtpd/0.28) with SMTP; Thu, 20 Jan 2005 07:22:06 -0800
Received:  from spamfilter.lastar.com ([192.168.70.12]) by
server11.lastar.com (SMSSMTP 4.0.0.59) with SMTP id M2005012010220301455
for <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500
Received:  from localhost (localhost [127.0.0.1])     by
spamfilter.lastar.com (Postfix) with ESMTP id 9845CEFCE4    for
<us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
Received:  from spamfilter.lastar.com ([127.0.0.1]) by localhost
(spamfilter [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31569-10
for <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
Received:  from server24.ctg.com (server24.ctg.com [192.168.74.10])     by
spamfilter.lastar.com (Postfix) with ESMTP id 58550EFCE0    for
<us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
X_MimeOLE:  Produced By Microsoft Exchange V6.5.7226.0
MIME_Version:  1.0
Subject:  Testing a message
PostedDate:  01/20/2005 09:22:02 AM
$MessageID:  <62...@server24.ctg.com>
X_MS_Has_Attach:
X_MS_TNEF_Correlator:
Thread_Topic:  Testing a message
Thread_Index:  AcT/A8r1xq4Lq9KHR4yEJ+GLien6cQ==
From:  "Jason Gauthier" <jg...@lastar.com>
SendTo:  "SPAMASSASSIN" <us...@spamassassin.apache.org>
X_Virus_Scanned:  amavisd-new at lastar.com
X_Virus_Checked:  Checked
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.8 required=4.0 tests=AWL,BAYES_00,HTML_MESSAGE
autolearn=ham version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:22:32 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:21 AM
SMTPOriginator:
users-return-22431-KyleReynolds=transplace.com@spamassassin.apache.org
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:22:32 AM-01/20/2005 09:22:32 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:22:32 AM

Greetings!

  I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
A message came in that was not spam that got blocked.  I took it to
sa-learn and learned it as ham.

I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?

Jason



Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009323090:24101 ;          Thu, 20 Jan 2005 09:32:30 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 1106235150878; Thu, 20 Jan
2005 09:32:30 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
AE2DD11480; Thu, 20 Jan 2005 09:32:30 -0600 (CST)
Received:  from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
[134.130.3.130])  by smtp.transplace.com (Postfix) with ESMTP id A0F3E11447
for <ky...@transplace.com>; Thu, 20 Jan 2005 09:32:28 -0600 (CST)
Received:  from r220-1 (r220-1.rz.RWTH-Aachen.DE [134.130.3.31]) by
ms-dienst.rz.rwth-aachen.de (iPlanet Messaging Server 5.2 HotFix 1.12
(built Feb 13 2003)) with ESMTP id
<0I...@ms-dienst.rz.rwth-aachen.de> for
kyle.reynolds@transplace.com; Thu, 20 Jan 2005 16:28:26 +0100 (MET)
Received:  from relay.rwth-aachen.de ([134.130.3.1])  by r220-1
(MailMonitor for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:26:51 +0100 (MET)
Received:  from hermes.rz.rwth-aachen.de (hermes.rz.RWTH-Aachen.DE
[134.130.4.36])   by relay.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id
j0KFQdUJ001781; Thu, 20 Jan 2005 16:26:39 +0100 (MET)
Received:  from [134.130.4.36] (localhost [127.0.0.1])      by
hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with ESMTP id
j0KFHElg012554; Thu, 20 Jan 2005 16:20:48 +0100 (CET)
Received:  from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
[134.130.3.130])  by hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with
ESMTP id    j0KFHBle012550 for <pr...@lists.RWTH-Aachen.DE>; Thu, 20 Jan
2005 16:17:11 +0100 (CET)
Received:  from circe (circe.rz.RWTH-Aachen.DE [134.130.3.36])    by
ms-dienst.rz.rwth-aachen.de   (iPlanet Messaging Server 5.2 HotFix 1.12
(built Feb 13 2003))    with ESMTP id
<0I...@ms-dienst.rz.rwth-aachen.de> for
procmail@lists.RWTH-Aachen.DE (ORCPT procmail@lists.RWTH-Aachen.DE); Thu,
20 Jan 2005 16:17:10 +0100 (MET)
Received:  from relay2.rwth-aachen.de ([134.130.3.6]) by circe (MailMonitor
for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:17:09 +0100 (MET)
Received:  from smtps-vbr2.xs4all.nl (smtps-vbr2.xs4all.nl [194.109.24.18])
by relay2.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id j0KFH7st023252
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)     for
<pr...@lists.RWTH-Aachen.DE>; Thu, 20 Jan 2005 16:17:07 +0100 (MET)
Received:  from isop10 (velvet.isolution.nl [194.109.164.102])
(authenticated bits=0)  by smtps-vbr2.xs4all.nl (8.12.11/8.12.11) with
ESMTP id j0KFH715004012 for <pr...@lists.RWTH-Aachen.DE>; Thu, 20 Jan
2005 16:17:07 +0100 (CET envelope-from rvtol@isolution.nl)
PostedDate:  01/20/2005 09:16:57 AM
Principal:  "Ruud H.G. van Tol" <rv...@isolution.nl>
Subject:  Re: Variable names
From:  procmail-bounces@lists.RWTH-Aachen.DE
SendTo:  "[procmail]" <pr...@lists.RWTH-Aachen.DE>
Errors_To:  procmail-bounces@lists.RWTH-Aachen.DE
$MessageID:  <00...@isolution.nl>
Organization:  Chaos rules.
MIME_Version:  1.0
X_MimeOLE:  Produced By Microsoft MimeOLE V6.00.2800.1441
$Mailer:  Microsoft Outlook Express 6.00.2800.1437
DeliveryPriority:  N
X_MSMail_Priority:  Normal
Precedence:  list
X_BeenThere:  procmail@lists.RWTH-Aachen.DE
X_Virus_Scanned:  by XS4ALL Virus Scanner
References:  <bc...@mail.gmail.com>
<AN...@intrepid.com>
<38...@anet.at>
<Pi...@ayalon.eng.tau.ac.il>
<39...@anet.at>
<Pi...@localhost>
X_Mailman_Version:  2.1.5
list_post:  <ma...@lists.RWTH-Aachen.DE>
List_Subscribe:  <http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
<mailto:procmail-request@lists.RWTH-Aachen.DE?subject=subscribe>
list_unsubscribe:
<http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
<mailto:procmail-request@lists.RWTH-Aachen.DE?subject=unsubscribe>
List_Archive:  <http://mailman.RWTH-Aachen.de/pipermail/procmail>
list_help:  <mailto:procmail-request@lists.RWTH-Aachen.DE?subject=help>
List_Id:  discussion of the procmail program
<procmail.lists.RWTH-Aachen.DE>
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
      version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:32:30 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:21 AM
SMTPOriginator:  procmail-bounces@lists.RWTH-Aachen.DE
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:32:30 AM-01/20/2005 09:32:31 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:32:31 AM

Toen wij NM Public kietelden, kwam er dit uit:

> Does anyone know if there are any
> conventions for naming user-defined procmail variables?

I (try to) follow a namespace-approach. Inside abc.inc
I use abc_Varname for variables.

At the end of abc.inc I (should) unset all variables
that have no business outside abc.inc.

I sometimes used double underscore for locals, so
abc__Varname, but than an abc_Varname could also exist
and that would be a new source of problems. An
alternative would be abc_LOC_Varname.


Inside .procmailrc, the special 'PM_' prefix could be
chosen. And 'H_' for values derived from Headers, 'B_'
for body-vars, 'G_' for common globals.

Some often used variables should stay as they are, like
SPC, TAB, WSP (the one without []), NL, and such.


> Or for
> user-defined variables in the Unix world in general?

Both perl and PHP have namespaces. That helps a lot.

In a new procmail, we could have real namespaces, like
namespace.Varname. And multiple matches, like MATCH1..
MATCHn. And, and, ...

--
Grtz, Ruud

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail@lists.RWTH-Aachen.DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail



Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009333540:24187 ;          Thu, 20 Jan 2005 09:33:35 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 1106235214958; Thu, 20 Jan
2005 09:33:34 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
D720B11481; Thu, 20 Jan 2005 09:33:34 -0600 (CST)
Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
smtp.transplace.com (Postfix) with SMTP id E49C811485 for
<Ky...@transplace.com>; Thu, 20 Jan 2005 09:33:33 -0600 (CST)
Received:  (qmail 54834 invoked by uid 500); 20 Jan 2005 15:33:25 -0000
Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
Precedence:  bulk
list_help:  <ma...@spamassassin.apache.org>
list_unsubscribe:  <ma...@spamassassin.apache.org>
list_post:  <ma...@spamassassin.apache.org>
List_Id:  <users.spamassassin.apache.org>
Delivered_To:  mailing list users@spamassassin.apache.org
Received:  (qmail 54818 invoked by uid 99); 20 Jan 2005 15:33:25 -0000
X_ASF_Spam_Status:  No, hits=1.8 required=10.0
tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
X_Spam_Check_By:  apache.org
Received_SPF:  pass (hermes.apache.org: local policy)
Received:  from rwcrmhc11.comcast.net (HELO rwcrmhc11.comcast.net)
(204.127.198.35)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:33:23 -0800
Received:  from mk.comcast.net
(pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84])          by
comcast.net (rwcrmhc11) with SMTP          id <200501201533200130090j09e>;
Thu, 20 Jan 2005 15:33:21 +0000
$MessageID:  <6....@mail.comcast.net>
$Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
PostedDate:  01/20/2005 09:33:22 AM
SendTo:  "Jason Gauthier" <jg...@lastar.com>,"SPAMASSASSIN"
<us...@spamassassin.apache.org>
From:  Matt Kettler <mk...@comcast.net>
Subject:  Re: Testing a message
In_Reply_To:  <62...@server24.ctg.com>
References:  <62...@server24.ctg.com>
MIME_Version:  1.0
X_Virus_Checked:  Checked
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
      version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:33:35 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
users-return-22432-KyleReynolds=transplace.com@spamassassin.apache.org
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:33:35 AM-01/20/2005 09:33:35 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:33:35 AM

At 10:22 AM 1/20/2005, Jason Gauthier wrote:
>   I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
>A message came in that was not spam that got blocked.  I took it to
>sa-learn and learned it as ham.
>
>I want to take the message now and re-score it to see how it holds up.
>What is the best way of accomplishing this?

pipe it through the spamassassin command line:

spamassassin <message.txt

Optionaly you can add the -t parameter to force SA to generate a spam
report, even if it's below the threshold (helpful to see all the rules).

Note: Make sure that sa-learn and spamassassin are being run as the same
user than amavis will access spamassassin as. Otherwise you might be using
a different bayes database (They default to being in $HOME)




Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009345142:24260 ;          Thu, 20 Jan 2005 09:34:51 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 1106235291367; Thu, 20 Jan
2005 09:34:51 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
44B3711481; Thu, 20 Jan 2005 09:34:51 -0600 (CST)
Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
smtp.transplace.com (Postfix) with SMTP id 3C2DE11457 for
<Ky...@transplace.com>; Thu, 20 Jan 2005 09:34:50 -0600 (CST)
Received:  (qmail 58916 invoked by uid 500); 20 Jan 2005 15:34:40 -0000
Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
Precedence:  bulk
list_help:  <ma...@spamassassin.apache.org>
list_unsubscribe:  <ma...@spamassassin.apache.org>
list_post:  <ma...@spamassassin.apache.org>
List_Id:  <users.spamassassin.apache.org>
Delivered_To:  mailing list users@spamassassin.apache.org
Received:  (qmail 58903 invoked by uid 99); 20 Jan 2005 15:34:40 -0000
X_ASF_Spam_Status:  No, hits=0.1 required=10.0  tests=FORGED_RCVD_HELO
X_Spam_Check_By:  apache.org
Received_SPF:  pass (hermes.apache.org: local policy)
Received:  from smtp-vbr2.xs4all.nl (HELO smtp-vbr2.xs4all.nl)
(194.109.24.22)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:34:38 -0800
Received:  from webmail.xs4all.nl (webmail7.xs4all.nl [194.109.22.167]) by
smtp-vbr2.xs4all.nl (8.12.11/8.12.11) with ESMTP id j0KFYXd5063471;
Thu, 20 Jan 2005 16:34:34 +0100 (CET)     (envelope-from
mvbengro@xs4all.nl)
Received:  from 80.127.176.177        by webmail.xs4all.nl with HTTP;
Thu, 20 Jan 2005 16:34:34 +0100 (CET)
$MessageID:  <93...@80.127.176.177>
In_Reply_To:  <62...@server24.ctg.com>
References:  <62...@server24.ctg.com>
PostedDate:  01/20/2005 09:34:34 AM
Subject:  Re: Testing a message
From:  "Menno van Bennekom" <mv...@xs4all.nl>
SendTo:  "Jason Gauthier" <jg...@lastar.com>
CopyTo:  "SPAMASSASSIN" <us...@spamassassin.apache.org>
ReplyTo:  mvbengro@xs4all.nl
User_Agent:  SquirrelMail/1.4.3a
$Mailer:  SquirrelMail/1.4.3a
MIME_Version:  1.0
X_Virus_Scanned:  by XS4ALL Virus Scanner
X_Virus_Checked:  Checked
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.6 required=4.0 tests=AWL,BAYES_00 autolearn=ham
      version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:34:51 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
users-return-22433-KyleReynolds=transplace.com@spamassassin.apache.org
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:34:51 AM-01/20/2005 09:34:51 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:34:51 AM

> Greetings!
>
>   I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
> A message came in that was not spam that got blocked.  I took it to
> sa-learn and learned it as ham.
>
> I want to take the message now and re-score it to see how it holds up.
> What is the best way of accomplishing this?
>
> Jason
You probably did something like 'cat message | sa-learn --ham' to learn it
as ham. Like that you can do 'cat message | sendmail user@domain.tld' to
send it again. Or you can do 'cat message | spamassassin -D' to just
evaluate what spamassassin would have done with the message.

Menno van Bennekom



Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009351447:24295 ;          Thu, 20 Jan 2005 09:35:14 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 1106235314196; Thu, 20 Jan
2005 09:35:14 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
121DD11460; Thu, 20 Jan 2005 09:35:14 -0600 (CST)
Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
smtp.transplace.com (Postfix) with SMTP id D7E7011440 for
<Ky...@transplace.com>; Thu, 20 Jan 2005 09:35:12 -0600 (CST)
Received:  (qmail 59655 invoked by uid 500); 20 Jan 2005 15:34:45 -0000
Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
Precedence:  bulk
list_help:  <ma...@spamassassin.apache.org>
list_unsubscribe:  <ma...@spamassassin.apache.org>
list_post:  <ma...@spamassassin.apache.org>
List_Id:  <users.spamassassin.apache.org>
Delivered_To:  mailing list users@spamassassin.apache.org
Received:  (qmail 59591 invoked by uid 500); 20 Jan 2005 15:34:44 -0000
Delivered_To:  apmail-incubator-spamassassin-users@incubator.apache.org
Received:  (qmail 59459 invoked by uid 99); 20 Jan 2005 15:34:43 -0000
X_ASF_Spam_Status:  No, hits=1.8 required=10.0
tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
X_Spam_Check_By:  apache.org
Received_SPF:  pass (hermes.apache.org: local policy)
Received:  from rwcrmhc13.comcast.net (HELO rwcrmhc13.comcast.net)
(204.127.198.39)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:34:43 -0800
Received:  from mk.comcast.net
(pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84])          by
comcast.net (rwcrmhc13) with SMTP          id <2005012015343501500d5spde>;
Thu, 20 Jan 2005 15:34:41 +0000
$MessageID:  <6....@mail.comcast.net>
$Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
PostedDate:  01/20/2005 09:34:38 AM
SendTo:  "Thomas Kinghorn [MTNNS -Rosebank]"
<th...@incubator.apache.org>
From:  Matt Kettler <mk...@comcast.net>
Subject:  Re: Spamassassin 3.0.2 child processes
In_Reply_To:  <91B75F7537DD0E45BDFB937AFE43420930A909@bonsai.int.mtnns.ne
t>
References:  <91...@bonsai.int.mtnns.net>
MIME_Version:  1.0
X_Virus_Checked:  Checked
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
      version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:35:14 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
users-return-22434-KyleReynolds=transplace.com@spamassassin.apache.org
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:35:14 AM-01/20/2005 09:35:14 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:35:14 AM

At 06:58 AM 1/20/2005, Thomas Kinghorn [MTNNS -Rosebank] wrote:
>Is there a way to limit spamd child processes?
>
># ps -ef | grep spam
>
>root       602     1  0 13:28 ?        00:00:12 /usr/bin/spamd -d -c -m5
-H
>xadmin     649   602  0 13:29 ?        00:00:09 spamd child
>xadmin     650   602  0 13:29 ?        00:00:07 spamd child
>xadmin     651   602  0 13:29 ?        00:00:13 spamd child
>root       652   602  0 13:29 ?        00:00:10 spamd child
>root       653   602  0 13:29 ?        00:00:08 spamd child


Yes, with the -m parameter you are already using.  You've got -m5, spamd
has 5 children.. set it to -m2 and you'll get 2.




Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009354443:24330 ;          Thu, 20 Jan 2005 09:35:44 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 1106235344541; Thu, 20 Jan
2005 09:35:44 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
63A2811457; Thu, 20 Jan 2005 09:35:44 -0600 (CST)
Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
smtp.transplace.com (Postfix) with SMTP id B5DDF1148D for
<Ky...@transplace.com>; Thu, 20 Jan 2005 09:35:34 -0600 (CST)
Received:  (qmail 60113 invoked by uid 500); 20 Jan 2005 15:34:49 -0000
Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
Precedence:  bulk
list_help:  <ma...@spamassassin.apache.org>
list_unsubscribe:  <ma...@spamassassin.apache.org>
list_post:  <ma...@spamassassin.apache.org>
List_Id:  <users.spamassassin.apache.org>
Delivered_To:  mailing list users@spamassassin.apache.org
Received:  (qmail 59968 invoked by uid 500); 20 Jan 2005 15:34:47 -0000
Delivered_To:  apmail-incubator-spamassassin-users@incubator.apache.org
Received:  (qmail 59936 invoked by uid 99); 20 Jan 2005 15:34:47 -0000
X_ASF_Spam_Status:  No, hits=0.0 required=10.0  tests=
X_Spam_Check_By:  apache.org
Received_SPF:  neutral (hermes.apache.org: local policy)
Received:  from mailgate1.dslextreme.com (HELO mailgate1.dslextreme.com)
(66.51.199.94)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:34:45 -0800
Received:  from mail5.dslextreme.com (unknown [192.168.7.93])     by
mailgate1.dslextreme.com (Postfix) with SMTP id 80D59630309 for
<sp...@incubator.apache.org>; Thu, 20 Jan 2005 07:32:11 -0800
(PST)
Received:  (qmail 1604 invoked from network); 20 Jan 2005 15:34:42 -0000
Received:  from unknown (HELO espphotography.dslextreme.com)
(66.245.217.196)  by mail5.dslextreme.com with SMTP; Thu, 20 Jan 2005
07:34:42 -0800
$MessageID:  <6....@pop.garc.com>
$Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
PostedDate:  01/20/2005 09:34:36 AM
SendTo:  spamassassin-users@incubator.apache.org
From:  Evan Platt <ev...@espphotography.com>
Subject:  Re: Testing a message
In_Reply_To:  <62...@server24.ctg.com>
References:  <62...@server24.ctg.com>
MIME_Version:  1.0
X_DSLExtreme_MailGate_Information:  Please contact the ISP for more
information
X_DSLExtreme_MailGate:  Found to be clean
X_MailScanner_From:  evan@espphotography.com
X_Virus_Checked:  Checked
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
      version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:35:44 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
users-return-22435-KyleReynolds=transplace.com@spamassassin.apache.org
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:35:44 AM-01/20/2005 09:35:44 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:35:44 AM

At 07:22 AM 1/20/2005, you wrote:

>Greetings!
>
>   I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
>A message came in that was not spam that got blocked.  I took it to
>sa-learn and learned it as ham.
>
>I want to take the message now and re-score it to see how it holds up.
>What is the best way of accomplishing this?

Someone will I'm sure correct me if I'm wrong...

but back when I was a geek in training, I could save the message to a file,
and run

spamassassin < filename1 > filename2

where filename1 was the original file, filename2 is the output file that SA
would create with the new score.

This may have changed...

Evan

**********************************************************************************************************************************************************************************


Thanks,


Kyle Reynolds
972-731-4731
KyleReynolds@Transplace.com




Re: sa-learn with lotus notes

Posted by Mike Carlson <mi...@mcarlson.net>.
** This is a very quick and raw howto. I should spend some time putting 
something webanized together with screenshots and everything. **

I have attached the 3 files I use on my FreeBSD box. GetHam.txt and 
GetSpam.txt are the bash scripts. Pretty straight forward. I also 
attached a copy of my fetchmailrc file so you can get the email from the 
Notes server via POP3. I am sure a bash scripting guru could get this 
into one file, but I dont mind 3 files.

I created a user on my FreeBSD box called spamd. This is the user that 
MIMEDefang is running as.

We created two users on our Notes server called Spam Collector and Ham 
Collector.

We enabled POP3 access to the Notes server so we could download the 
messages via fetchmail.

***

To create the "Report Spam" Action do following:

In your Notes client, click Create at the top and select Agent

Give it a name. We called ours "Report Spam" and "Report Non-Spam". Our 
users would have no idea what HAM is.

Make sure it is set up as a Simple Action agent.

Add an action to copy documents to a database and select the database 
you want to copy the documents to.

Add an action to delete the documents from the database.

This will copy the message to the SpamCollector database and then delete 
them from the users database.

For the "Report Non-Spam" Action, do the same steps, just leave off the 
delete part. This will allow them to keep the message in the mailbox. 
After all they really did want it.

***

Our Notes guy is out of the office right now, but I will see if I can 
get some instructions from him on how to add the actions to the server 
template that you may be using. I didnt do that part. I had it set up as 
a private agent in my client for a few months before we finally rolled 
it out to the rest of the company through the general template everyone 
is using.

I manually go through the spam and ham collector mailboxes in my Notes 
client to remove any emails that should not be in there. We have a few 
users that use the "Report Spam" action as a delete function so we get 
all kinds of company email in there too.

I then run the bash script while being logged in via ssh as the spamd 
user on my FreeBSD box. I did notice that you have to actually be logged 
in as the spamd user (or whatever you have SA/MIMEDefang running as) and 
not su'd to the spamd user. If you are su'd it learns the spam in your 
logged in users bayes databases. There is probably a way around this, 
but I just log in as spamd to avoid any problems.

I could, and did for a while, set these bash scripts up to run through 
cron, but since our users tend to fill the mailboxes with crap I chose 
to run it manually so I can keep the bayes cleaner.

I will try to get something webanized this weekend. I didnt think there 
was much of a need so I never bothered.

If something doesnt make sense, or I am way off, or something can be 
simplified, let me know.

--Mike

Jeffrey Lee wrote:
> Sometimes, when we upgrade here, our agents fail to work on the never  
> versions... I guess some of them are very complex but I just like to  
> check. Could you send me that code as well?
> 
> I have a RH box but it is being replaced by FDSD soon but I should be  
> able to take what you have and alter it to work with RH
> 
> Thanks,
> Jeffrey Lee
> reflex8.com
> 
> On Jan 20, 2005, at 10:28 AM, Mike Carlson wrote:
> 
>> We dont use OS X here so I am not sure.
>>
>> Its just an agent so it will work in almost any version of Notes. We  
>> used it on 5.x for a long time before we recently upgraded to 6.
>>
>> Its just a simple agent that moves the selected messages to a 
>> specific  database.
>>
>> --Mike
>>
>> Jeffrey Lee wrote:
>>
>>> Would you happen to know if there is a domino 6.0 app for OS X?
>>> Also is your code exclusive to Notes 6.0 + or will it work on 5.0.9?
>>> On Jan 20, 2005, at 10:05 AM, Mike Carlson wrote:
>>>
>>>> We created 2 mailboxes on our Notes server called SpamCollector 
>>>> and   HamCollector.
>>>>
>>>> We then set up an Agent in the template that added an action to 
>>>> move   selected untagged spam to the Spam Collector mailbox and copy 
>>>> the   selected HAM messages to the Ham collector mailbox.
>>>>
>>>> I created a bash script on my FreeBSD box that is running SA to 
>>>> log   into the different accounts via POP3 to the spamd account on 
>>>> the SA   box and then runs the learn process.
>>>>
>>>> It works pretty slick.
>>>>
>>>> You have to setup an agent to move or copy the messages to the   
>>>> databases instead of forwarding them otherwise you lose the headers.
>>>>
>>>> I can provide some code if you want. We are on Notes 6.5 and 
>>>> Domino   6.0.
>>>>
>>>> --Mike
>>>>
>>>> KyleReynolds@transplace.com wrote:
>>>>
>>>>> Help...  I need to feed spam and ham to sa-learn.  We are using  
>>>>> lotus  notes
>>>>> R5 and I need to get the messages into a format that sa-learn can   
>>>>> use.  The
>>>>> closest I have found is to export messages as "structured text",  
>>>>> and  this
>>>>> exports multiple messages as one file, the example below is how  
>>>>> they  are
>>>>> exported...  Is this usable by sa-learn?  Any suggestions?  
>>>>> Thanks   for the
>>>>> advice.
>>>>> ******************************************************************** 
>>>>> **  
>>>>> ******************************************************************** 
>>>>> ** ****************************************
>>>>> Received:  from p2kwshp1 ([10.67.3.129])          by
>>>>> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          
>>>>> with   SMTP id
>>>>> 2005012009223223:23490 ;          Thu, 20 Jan 2005 09:22:32 -0600
>>>>> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
>>>>> (WebShield SMTP v4.5 MR1a P0803.345);     id 110623455278; Thu, 
>>>>> 20   Jan 2005
>>>>> 09:22:32 -0600
>>>>> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
>>>>> 01B1A11447; Thu, 20 Jan 2005 09:22:31 -0600 (CST)
>>>>> Received:  from mail.apache.org (hermes.apache.org  
>>>>> [209.237.227.199])    by
>>>>> smtp.transplace.com (Postfix) with SMTP id D786E1146A for
>>>>> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:22:30 -0600 (CST)
>>>>> Received:  (qmail 19329 invoked by uid 500); 20 Jan 2005 15:22:09   
>>>>> -0000
>>>>> Mailing_List:  contact users-help@spamassassin.apache.org; run by   
>>>>> ezmlm
>>>>> Precedence:  bulk
>>>>> list_help:  <ma...@spamassassin.apache.org>
>>>>> list_unsubscribe:   <ma...@spamassassin.apache.org>
>>>>> list_post:  <ma...@spamassassin.apache.org>
>>>>> List_Id:  <users.spamassassin.apache.org>
>>>>> Delivered_To:  mailing list users@spamassassin.apache.org
>>>>> Received:  (qmail 19226 invoked by uid 99); 20 Jan 2005 15:22:08  
>>>>> -0000
>>>>> X_ASF_Spam_Status:  No, hits=0.0 required=10.0
>>>>> tests=HTML_60_70,HTML_MESSAGE
>>>>> X_Spam_Check_By:  apache.org
>>>>> Received_SPF:  pass (hermes.apache.org: local policy)
>>>>> Received:  from mail.lastar.com (HELO server11.lastar.com)   
>>>>> (65.89.139.10)
>>>>> by apache.org (qpsmtpd/0.28) with SMTP; Thu, 20 Jan 2005 07:22:06   
>>>>> -0800
>>>>> Received:  from spamfilter.lastar.com ([192.168.70.12]) by
>>>>> server11.lastar.com (SMSSMTP 4.0.0.59) with SMTP id   
>>>>> M2005012010220301455
>>>>> for <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500
>>>>> Received:  from localhost (localhost [127.0.0.1])     by
>>>>> spamfilter.lastar.com (Postfix) with ESMTP id 9845CEFCE4    for
>>>>> <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500  
>>>>> (EST)
>>>>> Received:  from spamfilter.lastar.com ([127.0.0.1]) by localhost
>>>>> (spamfilter [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id   
>>>>> 31569-10
>>>>> for <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03  
>>>>> -0500  (EST)
>>>>> Received:  from server24.ctg.com (server24.ctg.com 
>>>>> [192.168.74.10])       by
>>>>> spamfilter.lastar.com (Postfix) with ESMTP id 58550EFCE0    for
>>>>> <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500  
>>>>> (EST)
>>>>> X_MimeOLE:  Produced By Microsoft Exchange V6.5.7226.0
>>>>> MIME_Version:  1.0
>>>>> Subject:  Testing a message
>>>>> PostedDate:  01/20/2005 09:22:02 AM
>>>>> $MessageID:   
>>>>> <62...@server24.ctg.com>
>>>>> X_MS_Has_Attach:
>>>>> X_MS_TNEF_Correlator:
>>>>> Thread_Topic:  Testing a message
>>>>> Thread_Index:  AcT/A8r1xq4Lq9KHR4yEJ+GLien6cQ==
>>>>> From:  "Jason Gauthier" <jg...@lastar.com>
>>>>> SendTo:  "SPAMASSASSIN" <us...@spamassassin.apache.org>
>>>>> X_Virus_Scanned:  amavisd-new at lastar.com
>>>>> X_Virus_Checked:  Checked
>>>>> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
>>>>> pfbspmp1.transplace.com
>>>>> X_Spam_Status:  No, hits=-4.8 required=4.0   
>>>>> tests=AWL,BAYES_00,HTML_MESSAGE
>>>>> autolearn=ham version=2.63
>>>>> X_Spam_Level:
>>>>> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 
>>>>> 5.0.11    |July
>>>>> 24, 2002) at 01/20/2005 09:22:32 AM,MIME-CD by Notes Client on Kyle
>>>>> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
>>>>> AM,MIME-CD complete at 01/20/2005 09:44:21 AM
>>>>> SMTPOriginator:
>>>>> users-return-22431- 
>>>>> KyleReynolds=transplace.com@spamassassin.apache.org
>>>>> $UpdatedBy:
>>>>> $Orig:
>>>>> Categories:
>>>>> $Revisions:
>>>>> RouteServers:  CN=psplotp1/O=com
>>>>> RouteTimes:  01/20/2005 09:22:32 AM-01/20/2005 09:22:32 AM
>>>>> $MsgTrackFlags:  0
>>>>> DeliveredDate:  01/20/2005 09:22:32 AM
>>>>> Greetings!
>>>>>   I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is   
>>>>> running)
>>>>> A message came in that was not spam that got blocked.  I took it to
>>>>> sa-learn and learned it as ham.
>>>>> I want to take the message now and re-score it to see how it holds  
>>>>> up.
>>>>> What is the best way of accomplishing this?
>>>>> Jason
>>>>> Received:  from p2kwshp1 ([10.67.3.129])          by
>>>>> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          
>>>>> with   SMTP id
>>>>> 2005012009323090:24101 ;          Thu, 20 Jan 2005 09:32:30 -0600
>>>>> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
>>>>> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235150878; Thu, 
>>>>> 20   Jan
>>>>> 2005 09:32:30 -0600
>>>>> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
>>>>> AE2DD11480; Thu, 20 Jan 2005 09:32:30 -0600 (CST)
>>>>> Received:  from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
>>>>> [134.130.3.130])  by smtp.transplace.com (Postfix) with ESMTP id   
>>>>> A0F3E11447
>>>>> for <ky...@transplace.com>; Thu, 20 Jan 2005 09:32:28 
>>>>> -0600   (CST)
>>>>> Received:  from r220-1 (r220-1.rz.RWTH-Aachen.DE [134.130.3.31]) by
>>>>> ms-dienst.rz.rwth-aachen.de (iPlanet Messaging Server 5.2 HotFix  1.12
>>>>> (built Feb 13 2003)) with ESMTP id
>>>>> <0I...@ms-dienst.rz.rwth-aachen.de> for
>>>>> kyle.reynolds@transplace.com; Thu, 20 Jan 2005 16:28:26 +0100 (MET)
>>>>> Received:  from relay.rwth-aachen.de ([134.130.3.1])  by r220-1
>>>>> (MailMonitor for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:26:51 +0100  
>>>>> (MET)
>>>>> Received:  from hermes.rz.rwth-aachen.de (hermes.rz.RWTH-Aachen.DE
>>>>> [134.130.4.36])   by relay.rwth-aachen.de (8.13.0/8.13.0/1) with   
>>>>> ESMTP id
>>>>> j0KFQdUJ001781; Thu, 20 Jan 2005 16:26:39 +0100 (MET)
>>>>> Received:  from [134.130.4.36] (localhost [127.0.0.1])      by
>>>>> hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with ESMTP id
>>>>> j0KFHElg012554; Thu, 20 Jan 2005 16:20:48 +0100 (CET)
>>>>> Received:  from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
>>>>> [134.130.3.130])  by hermes.rz.rwth-aachen.de 
>>>>> (8.12.8+Sun/8.12.2-1)   with
>>>>> ESMTP id    j0KFHBle012550 for <pr...@lists.RWTH-Aachen.DE>;  
>>>>> Thu,  20 Jan
>>>>> 2005 16:17:11 +0100 (CET)
>>>>> Received:  from circe (circe.rz.RWTH-Aachen.DE [134.130.3.36])    by
>>>>> ms-dienst.rz.rwth-aachen.de   (iPlanet Messaging Server 5.2 
>>>>> HotFix   1.12
>>>>> (built Feb 13 2003))    with ESMTP id
>>>>> <0I...@ms-dienst.rz.rwth-aachen.de> for
>>>>> procmail@lists.RWTH-Aachen.DE (ORCPT  
>>>>> procmail@lists.RWTH-Aachen.DE);  Thu,
>>>>> 20 Jan 2005 16:17:10 +0100 (MET)
>>>>> Received:  from relay2.rwth-aachen.de ([134.130.3.6]) by circe   
>>>>> (MailMonitor
>>>>> for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:17:09 +0100 (MET)
>>>>> Received:  from smtps-vbr2.xs4all.nl (smtps-vbr2.xs4all.nl   
>>>>> [194.109.24.18])
>>>>> by relay2.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id   
>>>>> j0KFH7st023252
>>>>> (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 
>>>>> verify=NOT)       for
>>>>> <pr...@lists.RWTH-Aachen.DE>; Thu, 20 Jan 2005 16:17:07 +0100  
>>>>> (MET)
>>>>> Received:  from isop10 (velvet.isolution.nl [194.109.164.102])
>>>>> (authenticated bits=0)  by smtps-vbr2.xs4all.nl (8.12.11/8.12.11)  
>>>>> with
>>>>> ESMTP id j0KFH715004012 for <pr...@lists.RWTH-Aachen.DE>; Thu,  
>>>>> 20  Jan
>>>>> 2005 16:17:07 +0100 (CET envelope-from rvtol@isolution.nl)
>>>>> PostedDate:  01/20/2005 09:16:57 AM
>>>>> Principal:  "Ruud H.G. van Tol" <rv...@isolution.nl>
>>>>> Subject:  Re: Variable names
>>>>> From:  procmail-bounces@lists.RWTH-Aachen.DE
>>>>> SendTo:  "[procmail]" <pr...@lists.RWTH-Aachen.DE>
>>>>> Errors_To:  procmail-bounces@lists.RWTH-Aachen.DE
>>>>> $MessageID:  <00...@isolution.nl>
>>>>> Organization:  Chaos rules.
>>>>> MIME_Version:  1.0
>>>>> X_MimeOLE:  Produced By Microsoft MimeOLE V6.00.2800.1441
>>>>> $Mailer:  Microsoft Outlook Express 6.00.2800.1437
>>>>> DeliveryPriority:  N
>>>>> X_MSMail_Priority:  Normal
>>>>> Precedence:  list
>>>>> X_BeenThere:  procmail@lists.RWTH-Aachen.DE
>>>>> X_Virus_Scanned:  by XS4ALL Virus Scanner
>>>>> References:  <bc...@mail.gmail.com>
>>>>> <AN...@intrepid.com>
>>>>> <38...@anet.at>
>>>>> <Pi...@ayalon.eng.tau.ac.il>
>>>>> <39...@anet.at>
>>>>> <Pi...@localhost>
>>>>> X_Mailman_Version:  2.1.5
>>>>> list_post:  <ma...@lists.RWTH-Aachen.DE>
>>>>> List_Subscribe:    
>>>>> <http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
>>>>> <mailto:procmail-request@lists.RWTH-Aachen.DE?subject=subscribe>
>>>>> list_unsubscribe:
>>>>> <http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
>>>>> <mailto:procmail-request@lists.RWTH-Aachen.DE?subject=unsubscribe>
>>>>> List_Archive:  <http://mailman.RWTH-Aachen.de/pipermail/procmail>
>>>>> list_help:    
>>>>> <mailto:procmail-request@lists.RWTH-Aachen.DE?subject=help>
>>>>> List_Id:  discussion of the procmail program
>>>>> <procmail.lists.RWTH-Aachen.DE>
>>>>> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
>>>>> pfbspmp1.transplace.com
>>>>> X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00   
>>>>> autolearn=ham
>>>>>       version=2.63
>>>>> X_Spam_Level:
>>>>> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 
>>>>> 5.0.11    |July
>>>>> 24, 2002) at 01/20/2005 09:32:30 AM,MIME-CD by Notes Client on Kyle
>>>>> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
>>>>> AM,MIME-CD complete at 01/20/2005 09:44:21 AM
>>>>> SMTPOriginator:  procmail-bounces@lists.RWTH-Aachen.DE
>>>>> $UpdatedBy:
>>>>> $Orig:
>>>>> Categories:
>>>>> $Revisions:
>>>>> RouteServers:  CN=psplotp1/O=com
>>>>> RouteTimes:  01/20/2005 09:32:30 AM-01/20/2005 09:32:31 AM
>>>>> $MsgTrackFlags:  0
>>>>> DeliveredDate:  01/20/2005 09:32:31 AM
>>>>> Toen wij NM Public kietelden, kwam er dit uit:
>>>>>
>>>>>> Does anyone know if there are any
>>>>>> conventions for naming user-defined procmail variables?
>>>>>
>>>>>
>>>>> I (try to) follow a namespace-approach. Inside abc.inc
>>>>> I use abc_Varname for variables.
>>>>> At the end of abc.inc I (should) unset all variables
>>>>> that have no business outside abc.inc.
>>>>> I sometimes used double underscore for locals, so
>>>>> abc__Varname, but than an abc_Varname could also exist
>>>>> and that would be a new source of problems. An
>>>>> alternative would be abc_LOC_Varname.
>>>>> Inside .procmailrc, the special 'PM_' prefix could be
>>>>> chosen. And 'H_' for values derived from Headers, 'B_'
>>>>> for body-vars, 'G_' for common globals.
>>>>> Some often used variables should stay as they are, like
>>>>> SPC, TAB, WSP (the one without []), NL, and such.
>>>>>
>>>>>> Or for
>>>>>> user-defined variables in the Unix world in general?
>>>>>
>>>>>
>>>>> Both perl and PHP have namespaces. That helps a lot.
>>>>> In a new procmail, we could have real namespaces, like
>>>>> namespace.Varname. And multiple matches, like MATCH1..
>>>>> MATCHn. And, and, ...
>>>>> -- 
>>>>> Grtz, Ruud
>>>>> ____________________________________________________________
>>>>> procmail mailing list   Procmail homepage: http://www.procmail.org/
>>>>> procmail@lists.RWTH-Aachen.DE
>>>>> http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail
>>>>> Received:  from p2kwshp1 ([10.67.3.129])          by
>>>>> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          
>>>>> with   SMTP id
>>>>> 2005012009333540:24187 ;          Thu, 20 Jan 2005 09:33:35 -0600
>>>>> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
>>>>> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235214958; Thu, 
>>>>> 20   Jan
>>>>> 2005 09:33:34 -0600
>>>>> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
>>>>> D720B11481; Thu, 20 Jan 2005 09:33:34 -0600 (CST)
>>>>> Received:  from mail.apache.org (hermes.apache.org  
>>>>> [209.237.227.199])    by
>>>>> smtp.transplace.com (Postfix) with SMTP id E49C811485 for
>>>>> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:33:33 -0600 (CST)
>>>>> Received:  (qmail 54834 invoked by uid 500); 20 Jan 2005 15:33:25   
>>>>> -0000
>>>>> Mailing_List:  contact users-help@spamassassin.apache.org; run by   
>>>>> ezmlm
>>>>> Precedence:  bulk
>>>>> list_help:  <ma...@spamassassin.apache.org>
>>>>> list_unsubscribe:   <ma...@spamassassin.apache.org>
>>>>> list_post:  <ma...@spamassassin.apache.org>
>>>>> List_Id:  <users.spamassassin.apache.org>
>>>>> Delivered_To:  mailing list users@spamassassin.apache.org
>>>>> Received:  (qmail 54818 invoked by uid 99); 20 Jan 2005 15:33:25  
>>>>> -0000
>>>>> X_ASF_Spam_Status:  No, hits=1.8 required=10.0
>>>>> tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
>>>>> X_Spam_Check_By:  apache.org
>>>>> Received_SPF:  pass (hermes.apache.org: local policy)
>>>>> Received:  from rwcrmhc11.comcast.net (HELO rwcrmhc11.comcast.net)
>>>>> (204.127.198.35)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 
>>>>> 20   Jan 2005
>>>>> 07:33:23 -0800
>>>>> Received:  from mk.comcast.net
>>>>> (pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84])          by
>>>>> comcast.net (rwcrmhc11) with SMTP          id   
>>>>> <200501201533200130090j09e>;
>>>>> Thu, 20 Jan 2005 15:33:21 +0000
>>>>> $MessageID:  <6....@mail.comcast.net>
>>>>> $Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
>>>>> PostedDate:  01/20/2005 09:33:22 AM
>>>>> SendTo:  "Jason Gauthier" <jg...@lastar.com>,"SPAMASSASSIN"
>>>>> <us...@spamassassin.apache.org>
>>>>> From:  Matt Kettler <mk...@comcast.net>
>>>>> Subject:  Re: Testing a message
>>>>> In_Reply_To:    
>>>>> <62...@server24.ctg.com>
>>>>> References:   
>>>>> <62...@server24.ctg.com>
>>>>> MIME_Version:  1.0
>>>>> X_Virus_Checked:  Checked
>>>>> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
>>>>> pfbspmp1.transplace.com
>>>>> X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00   
>>>>> autolearn=ham
>>>>>       version=2.63
>>>>> X_Spam_Level:
>>>>> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 
>>>>> 5.0.11    |July
>>>>> 24, 2002) at 01/20/2005 09:33:35 AM,MIME-CD by Notes Client on Kyle
>>>>> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
>>>>> AM,MIME-CD complete at 01/20/2005 09:44:22 AM
>>>>> SMTPOriginator:
>>>>> users-return-22432- 
>>>>> KyleReynolds=transplace.com@spamassassin.apache.org
>>>>> $UpdatedBy:
>>>>> $Orig:
>>>>> Categories:
>>>>> $Revisions:
>>>>> RouteServers:  CN=psplotp1/O=com
>>>>> RouteTimes:  01/20/2005 09:33:35 AM-01/20/2005 09:33:35 AM
>>>>> $MsgTrackFlags:  0
>>>>> DeliveredDate:  01/20/2005 09:33:35 AM
>>>>> At 10:22 AM 1/20/2005, Jason Gauthier wrote:
>>>>>
>>>>>>  I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is   
>>>>>> running)
>>>>>> A message came in that was not spam that got blocked.  I took it to
>>>>>> sa-learn and learned it as ham.
>>>>>>
>>>>>> I want to take the message now and re-score it to see how it 
>>>>>> holds   up.
>>>>>> What is the best way of accomplishing this?
>>>>>
>>>>>
>>>>> pipe it through the spamassassin command line:
>>>>> spamassassin <message.txt
>>>>> Optionaly you can add the -t parameter to force SA to generate a  spam
>>>>> report, even if it's below the threshold (helpful to see all the   
>>>>> rules).
>>>>> Note: Make sure that sa-learn and spamassassin are being run as 
>>>>> the   same
>>>>> user than amavis will access spamassassin as. Otherwise you might  
>>>>> be  using
>>>>> a different bayes database (They default to being in $HOME)
>>>>> Received:  from p2kwshp1 ([10.67.3.129])          by
>>>>> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          
>>>>> with   SMTP id
>>>>> 2005012009345142:24260 ;          Thu, 20 Jan 2005 09:34:51 -0600
>>>>> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
>>>>> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235291367; Thu, 
>>>>> 20   Jan
>>>>> 2005 09:34:51 -0600
>>>>> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
>>>>> 44B3711481; Thu, 20 Jan 2005 09:34:51 -0600 (CST)
>>>>> Received:  from mail.apache.org (hermes.apache.org  
>>>>> [209.237.227.199])    by
>>>>> smtp.transplace.com (Postfix) with SMTP id 3C2DE11457 for
>>>>> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:34:50 -0600 (CST)
>>>>> Received:  (qmail 58916 invoked by uid 500); 20 Jan 2005 15:34:40   
>>>>> -0000
>>>>> Mailing_List:  contact users-help@spamassassin.apache.org; run by   
>>>>> ezmlm
>>>>> Precedence:  bulk
>>>>> list_help:  <ma...@spamassassin.apache.org>
>>>>> list_unsubscribe:   <ma...@spamassassin.apache.org>
>>>>> list_post:  <ma...@spamassassin.apache.org>
>>>>> List_Id:  <users.spamassassin.apache.org>
>>>>> Delivered_To:  mailing list users@spamassassin.apache.org
>>>>> Received:  (qmail 58903 invoked by uid 99); 20 Jan 2005 15:34:40  
>>>>> -0000
>>>>> X_ASF_Spam_Status:  No, hits=0.1 required=10.0   
>>>>> tests=FORGED_RCVD_HELO
>>>>> X_Spam_Check_By:  apache.org
>>>>> Received_SPF:  pass (hermes.apache.org: local policy)
>>>>> Received:  from smtp-vbr2.xs4all.nl (HELO smtp-vbr2.xs4all.nl)
>>>>> (194.109.24.22)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20  
>>>>> Jan  2005
>>>>> 07:34:38 -0800
>>>>> Received:  from webmail.xs4all.nl (webmail7.xs4all.nl   
>>>>> [194.109.22.167]) by
>>>>> smtp-vbr2.xs4all.nl (8.12.11/8.12.11) with ESMTP id j0KFYXd5063471;
>>>>> Thu, 20 Jan 2005 16:34:34 +0100 (CET)     (envelope-from
>>>>> mvbengro@xs4all.nl)
>>>>> Received:  from 80.127.176.177        by webmail.xs4all.nl with  HTTP;
>>>>> Thu, 20 Jan 2005 16:34:34 +0100 (CET)
>>>>> $MessageID:   <93...@80.127.176.177>
>>>>> In_Reply_To:    
>>>>> <62...@server24.ctg.com>
>>>>> References:   
>>>>> <62...@server24.ctg.com>
>>>>> PostedDate:  01/20/2005 09:34:34 AM
>>>>> Subject:  Re: Testing a message
>>>>> From:  "Menno van Bennekom" <mv...@xs4all.nl>
>>>>> SendTo:  "Jason Gauthier" <jg...@lastar.com>
>>>>> CopyTo:  "SPAMASSASSIN" <us...@spamassassin.apache.org>
>>>>> ReplyTo:  mvbengro@xs4all.nl
>>>>> User_Agent:  SquirrelMail/1.4.3a
>>>>> $Mailer:  SquirrelMail/1.4.3a
>>>>> MIME_Version:  1.0
>>>>> X_Virus_Scanned:  by XS4ALL Virus Scanner
>>>>> X_Virus_Checked:  Checked
>>>>> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
>>>>> pfbspmp1.transplace.com
>>>>> X_Spam_Status:  No, hits=-4.6 required=4.0 tests=AWL,BAYES_00   
>>>>> autolearn=ham
>>>>>       version=2.63
>>>>> X_Spam_Level:
>>>>> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 
>>>>> 5.0.11    |July
>>>>> 24, 2002) at 01/20/2005 09:34:51 AM,MIME-CD by Notes Client on Kyle
>>>>> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
>>>>> AM,MIME-CD complete at 01/20/2005 09:44:22 AM
>>>>> SMTPOriginator:
>>>>> users-return-22433- 
>>>>> KyleReynolds=transplace.com@spamassassin.apache.org
>>>>> $UpdatedBy:
>>>>> $Orig:
>>>>> Categories:
>>>>> $Revisions:
>>>>> RouteServers:  CN=psplotp1/O=com
>>>>> RouteTimes:  01/20/2005 09:34:51 AM-01/20/2005 09:34:51 AM
>>>>> $MsgTrackFlags:  0
>>>>> DeliveredDate:  01/20/2005 09:34:51 AM
>>>>>
>>>>>> Greetings!
>>>>>>
>>>>>>  I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is   
>>>>>> running)
>>>>>> A message came in that was not spam that got blocked.  I took it to
>>>>>> sa-learn and learned it as ham.
>>>>>>
>>>>>> I want to take the message now and re-score it to see how it 
>>>>>> holds   up.
>>>>>> What is the best way of accomplishing this?
>>>>>>
>>>>>> Jason
>>>>>
>>>>>
>>>>> You probably did something like 'cat message | sa-learn --ham' to   
>>>>> learn it
>>>>> as ham. Like that you can do 'cat message | sendmail  
>>>>> user@domain.tld'  to
>>>>> send it again. Or you can do 'cat message | spamassassin -D' to just
>>>>> evaluate what spamassassin would have done with the message.
>>>>> Menno van Bennekom
>>>>> Received:  from p2kwshp1 ([10.67.3.129])          by
>>>>> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          
>>>>> with   SMTP id
>>>>> 2005012009351447:24295 ;          Thu, 20 Jan 2005 09:35:14 -0600
>>>>> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
>>>>> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235314196; Thu, 
>>>>> 20   Jan
>>>>> 2005 09:35:14 -0600
>>>>> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
>>>>> 121DD11460; Thu, 20 Jan 2005 09:35:14 -0600 (CST)
>>>>> Received:  from mail.apache.org (hermes.apache.org  
>>>>> [209.237.227.199])    by
>>>>> smtp.transplace.com (Postfix) with SMTP id D7E7011440 for
>>>>> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:35:12 -0600 (CST)
>>>>> Received:  (qmail 59655 invoked by uid 500); 20 Jan 2005 15:34:45   
>>>>> -0000
>>>>> Mailing_List:  contact users-help@spamassassin.apache.org; run by   
>>>>> ezmlm
>>>>> Precedence:  bulk
>>>>> list_help:  <ma...@spamassassin.apache.org>
>>>>> list_unsubscribe:   <ma...@spamassassin.apache.org>
>>>>> list_post:  <ma...@spamassassin.apache.org>
>>>>> List_Id:  <users.spamassassin.apache.org>
>>>>> Delivered_To:  mailing list users@spamassassin.apache.org
>>>>> Received:  (qmail 59591 invoked by uid 500); 20 Jan 2005 15:34:44   
>>>>> -0000
>>>>> Delivered_To:    
>>>>> apmail-incubator-spamassassin-users@incubator.apache.org
>>>>> Received:  (qmail 59459 invoked by uid 99); 20 Jan 2005 15:34:43  
>>>>> -0000
>>>>> X_ASF_Spam_Status:  No, hits=1.8 required=10.0
>>>>> tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
>>>>> X_Spam_Check_By:  apache.org
>>>>> Received_SPF:  pass (hermes.apache.org: local policy)
>>>>> Received:  from rwcrmhc13.comcast.net (HELO rwcrmhc13.comcast.net)
>>>>> (204.127.198.39)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 
>>>>> 20   Jan 2005
>>>>> 07:34:43 -0800
>>>>> Received:  from mk.comcast.net
>>>>> (pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84])          by
>>>>> comcast.net (rwcrmhc13) with SMTP          id   
>>>>> <2005012015343501500d5spde>;
>>>>> Thu, 20 Jan 2005 15:34:41 +0000
>>>>> $MessageID:  <6....@mail.comcast.net>
>>>>> $Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
>>>>> PostedDate:  01/20/2005 09:34:38 AM
>>>>> SendTo:  "Thomas Kinghorn [MTNNS -Rosebank]"
>>>>> <th...@incubator.apache.org>
>>>>> From:  Matt Kettler <mk...@comcast.net>
>>>>> Subject:  Re: Spamassassin 3.0.2 child processes
>>>>> In_Reply_To:    
>>>>> <91B75F7537DD0E45BDFB937AFE43420930A909@bonsai.int.mtnns.ne
>>>>> t>
>>>>> References:    
>>>>> <91...@bonsai.int.mtnns.net>
>>>>> MIME_Version:  1.0
>>>>> X_Virus_Checked:  Checked
>>>>> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
>>>>> pfbspmp1.transplace.com
>>>>> X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00   
>>>>> autolearn=ham
>>>>>       version=2.63
>>>>> X_Spam_Level:
>>>>> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 
>>>>> 5.0.11    |July
>>>>> 24, 2002) at 01/20/2005 09:35:14 AM,MIME-CD by Notes Client on Kyle
>>>>> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
>>>>> AM,MIME-CD complete at 01/20/2005 09:44:22 AM
>>>>> SMTPOriginator:
>>>>> users-return-22434- 
>>>>> KyleReynolds=transplace.com@spamassassin.apache.org
>>>>> $UpdatedBy:
>>>>> $Orig:
>>>>> Categories:
>>>>> $Revisions:
>>>>> RouteServers:  CN=psplotp1/O=com
>>>>> RouteTimes:  01/20/2005 09:35:14 AM-01/20/2005 09:35:14 AM
>>>>> $MsgTrackFlags:  0
>>>>> DeliveredDate:  01/20/2005 09:35:14 AM
>>>>> At 06:58 AM 1/20/2005, Thomas Kinghorn [MTNNS -Rosebank] wrote:
>>>>>
>>>>>> Is there a way to limit spamd child processes?
>>>>>>
>>>>>> # ps -ef | grep spam
>>>>>>
>>>>>> root       602     1  0 13:28 ?        00:00:12 /usr/bin/spamd -d  
>>>>>> -c  -m5
>>>>>
>>>>>
>>>>> -H
>>>>>
>>>>>> xadmin     649   602  0 13:29 ?        00:00:09 spamd child
>>>>>> xadmin     650   602  0 13:29 ?        00:00:07 spamd child
>>>>>> xadmin     651   602  0 13:29 ?        00:00:13 spamd child
>>>>>> root       652   602  0 13:29 ?        00:00:10 spamd child
>>>>>> root       653   602  0 13:29 ?        00:00:08 spamd child
>>>>>
>>>>>
>>>>> Yes, with the -m parameter you are already using.  You've got 
>>>>> -m5,   spamd
>>>>> has 5 children.. set it to -m2 and you'll get 2.
>>>>> Received:  from p2kwshp1 ([10.67.3.129])          by
>>>>> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          
>>>>> with   SMTP id
>>>>> 2005012009354443:24330 ;          Thu, 20 Jan 2005 09:35:44 -0600
>>>>> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
>>>>> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235344541; Thu, 
>>>>> 20   Jan
>>>>> 2005 09:35:44 -0600
>>>>> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
>>>>> 63A2811457; Thu, 20 Jan 2005 09:35:44 -0600 (CST)
>>>>> Received:  from mail.apache.org (hermes.apache.org  
>>>>> [209.237.227.199])    by
>>>>> smtp.transplace.com (Postfix) with SMTP id B5DDF1148D for
>>>>> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:35:34 -0600 (CST)
>>>>> Received:  (qmail 60113 invoked by uid 500); 20 Jan 2005 15:34:49   
>>>>> -0000
>>>>> Mailing_List:  contact users-help@spamassassin.apache.org; run by   
>>>>> ezmlm
>>>>> Precedence:  bulk
>>>>> list_help:  <ma...@spamassassin.apache.org>
>>>>> list_unsubscribe:   <ma...@spamassassin.apache.org>
>>>>> list_post:  <ma...@spamassassin.apache.org>
>>>>> List_Id:  <users.spamassassin.apache.org>
>>>>> Delivered_To:  mailing list users@spamassassin.apache.org
>>>>> Received:  (qmail 59968 invoked by uid 500); 20 Jan 2005 15:34:47   
>>>>> -0000
>>>>> Delivered_To:    
>>>>> apmail-incubator-spamassassin-users@incubator.apache.org
>>>>> Received:  (qmail 59936 invoked by uid 99); 20 Jan 2005 15:34:47  
>>>>> -0000
>>>>> X_ASF_Spam_Status:  No, hits=0.0 required=10.0  tests=
>>>>> X_Spam_Check_By:  apache.org
>>>>> Received_SPF:  neutral (hermes.apache.org: local policy)
>>>>> Received:  from mailgate1.dslextreme.com (HELO   
>>>>> mailgate1.dslextreme.com)
>>>>> (66.51.199.94)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20  
>>>>> Jan  2005
>>>>> 07:34:45 -0800
>>>>> Received:  from mail5.dslextreme.com (unknown [192.168.7.93])     by
>>>>> mailgate1.dslextreme.com (Postfix) with SMTP id 80D59630309 for
>>>>> <sp...@incubator.apache.org>; Thu, 20 Jan 2005  
>>>>> 07:32:11  -0800
>>>>> (PST)
>>>>> Received:  (qmail 1604 invoked from network); 20 Jan 2005 
>>>>> 15:34:42   -0000
>>>>> Received:  from unknown (HELO espphotography.dslextreme.com)
>>>>> (66.245.217.196)  by mail5.dslextreme.com with SMTP; Thu, 20 Jan  2005
>>>>> 07:34:42 -0800
>>>>> $MessageID:  <6....@pop.garc.com>
>>>>> $Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
>>>>> PostedDate:  01/20/2005 09:34:36 AM
>>>>> SendTo:  spamassassin-users@incubator.apache.org
>>>>> From:  Evan Platt <ev...@espphotography.com>
>>>>> Subject:  Re: Testing a message
>>>>> In_Reply_To:    
>>>>> <62...@server24.ctg.com>
>>>>> References:   
>>>>> <62...@server24.ctg.com>
>>>>> MIME_Version:  1.0
>>>>> X_DSLExtreme_MailGate_Information:  Please contact the ISP for more
>>>>> information
>>>>> X_DSLExtreme_MailGate:  Found to be clean
>>>>> X_MailScanner_From:  evan@espphotography.com
>>>>> X_Virus_Checked:  Checked
>>>>> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
>>>>> pfbspmp1.transplace.com
>>>>> X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00   
>>>>> autolearn=ham
>>>>>       version=2.63
>>>>> X_Spam_Level:
>>>>> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 
>>>>> 5.0.11    |July
>>>>> 24, 2002) at 01/20/2005 09:35:44 AM,MIME-CD by Notes Client on Kyle
>>>>> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
>>>>> AM,MIME-CD complete at 01/20/2005 09:44:22 AM
>>>>> SMTPOriginator:
>>>>> users-return-22435- 
>>>>> KyleReynolds=transplace.com@spamassassin.apache.org
>>>>> $UpdatedBy:
>>>>> $Orig:
>>>>> Categories:
>>>>> $Revisions:
>>>>> RouteServers:  CN=psplotp1/O=com
>>>>> RouteTimes:  01/20/2005 09:35:44 AM-01/20/2005 09:35:44 AM
>>>>> $MsgTrackFlags:  0
>>>>> DeliveredDate:  01/20/2005 09:35:44 AM
>>>>> At 07:22 AM 1/20/2005, you wrote:
>>>>>
>>>>>> Greetings!
>>>>>>
>>>>>>  I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is   
>>>>>> running)
>>>>>> A message came in that was not spam that got blocked.  I took it to
>>>>>> sa-learn and learned it as ham.
>>>>>>
>>>>>> I want to take the message now and re-score it to see how it 
>>>>>> holds   up.
>>>>>> What is the best way of accomplishing this?
>>>>>
>>>>>
>>>>> Someone will I'm sure correct me if I'm wrong...
>>>>> but back when I was a geek in training, I could save the message 
>>>>> to  a  file,
>>>>> and run
>>>>> spamassassin < filename1 > filename2
>>>>> where filename1 was the original file, filename2 is the output 
>>>>> file   that SA
>>>>> would create with the new score.
>>>>> This may have changed...
>>>>> Evan
>>>>> ******************************************************************** 
>>>>> **  
>>>>> ******************************************************************** 
>>>>> ** **************************************
>>>>> Thanks,
>>>>> Kyle Reynolds
>>>>> 972-731-4731
>>>>> KyleReynolds@Transplace.com
> 
> 

Re: sa-learn with lotus notes

Posted by Mike Carlson <mi...@mcarlson.net>.
We created 2 mailboxes on our Notes server called SpamCollector and 
HamCollector.

We then set up an Agent in the template that added an action to move 
selected untagged spam to the Spam Collector mailbox and copy the 
selected HAM messages to the Ham collector mailbox.

I created a bash script on my FreeBSD box that is running SA to log into 
the different accounts via POP3 to the spamd account on the SA box and 
then runs the learn process.

It works pretty slick.

You have to setup an agent to move or copy the messages to the databases 
instead of forwarding them otherwise you lose the headers.

I can provide some code if you want. We are on Notes 6.5 and Domino 6.0.

--Mike

KyleReynolds@transplace.com wrote:
> Help...  I need to feed spam and ham to sa-learn.  We are using lotus notes
> R5 and I need to get the messages into a format that sa-learn can use.  The
> closest I have found is to export messages as "structured text", and this
> exports multiple messages as one file, the example below is how they are
> exported...  Is this usable by sa-learn?  Any suggestions?  Thanks for the
> advice.
> 
> ************************************************************************************************************************************************************************************
> 
> Received:  from p2kwshp1 ([10.67.3.129])          by
> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
> 2005012009223223:23490 ;          Thu, 20 Jan 2005 09:22:32 -0600
> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
> (WebShield SMTP v4.5 MR1a P0803.345);     id 110623455278; Thu, 20 Jan 2005
> 09:22:32 -0600
> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
> 01B1A11447; Thu, 20 Jan 2005 09:22:31 -0600 (CST)
> Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
> smtp.transplace.com (Postfix) with SMTP id D786E1146A for
> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:22:30 -0600 (CST)
> Received:  (qmail 19329 invoked by uid 500); 20 Jan 2005 15:22:09 -0000
> Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
> Precedence:  bulk
> list_help:  <ma...@spamassassin.apache.org>
> list_unsubscribe:  <ma...@spamassassin.apache.org>
> list_post:  <ma...@spamassassin.apache.org>
> List_Id:  <users.spamassassin.apache.org>
> Delivered_To:  mailing list users@spamassassin.apache.org
> Received:  (qmail 19226 invoked by uid 99); 20 Jan 2005 15:22:08 -0000
> X_ASF_Spam_Status:  No, hits=0.0 required=10.0
> tests=HTML_60_70,HTML_MESSAGE
> X_Spam_Check_By:  apache.org
> Received_SPF:  pass (hermes.apache.org: local policy)
> Received:  from mail.lastar.com (HELO server11.lastar.com) (65.89.139.10)
> by apache.org (qpsmtpd/0.28) with SMTP; Thu, 20 Jan 2005 07:22:06 -0800
> Received:  from spamfilter.lastar.com ([192.168.70.12]) by
> server11.lastar.com (SMSSMTP 4.0.0.59) with SMTP id M2005012010220301455
> for <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500
> Received:  from localhost (localhost [127.0.0.1])     by
> spamfilter.lastar.com (Postfix) with ESMTP id 9845CEFCE4    for
> <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
> Received:  from spamfilter.lastar.com ([127.0.0.1]) by localhost
> (spamfilter [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31569-10
> for <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
> Received:  from server24.ctg.com (server24.ctg.com [192.168.74.10])     by
> spamfilter.lastar.com (Postfix) with ESMTP id 58550EFCE0    for
> <us...@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
> X_MimeOLE:  Produced By Microsoft Exchange V6.5.7226.0
> MIME_Version:  1.0
> Subject:  Testing a message
> PostedDate:  01/20/2005 09:22:02 AM
> $MessageID:  <62...@server24.ctg.com>
> X_MS_Has_Attach:
> X_MS_TNEF_Correlator:
> Thread_Topic:  Testing a message
> Thread_Index:  AcT/A8r1xq4Lq9KHR4yEJ+GLien6cQ==
> From:  "Jason Gauthier" <jg...@lastar.com>
> SendTo:  "SPAMASSASSIN" <us...@spamassassin.apache.org>
> X_Virus_Scanned:  amavisd-new at lastar.com
> X_Virus_Checked:  Checked
> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
> pfbspmp1.transplace.com
> X_Spam_Status:  No, hits=-4.8 required=4.0 tests=AWL,BAYES_00,HTML_MESSAGE
> autolearn=ham version=2.63
> X_Spam_Level:
> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
> 24, 2002) at 01/20/2005 09:22:32 AM,MIME-CD by Notes Client on Kyle
> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
> AM,MIME-CD complete at 01/20/2005 09:44:21 AM
> SMTPOriginator:
> users-return-22431-KyleReynolds=transplace.com@spamassassin.apache.org
> $UpdatedBy:
> $Orig:
> Categories:
> $Revisions:
> RouteServers:  CN=psplotp1/O=com
> RouteTimes:  01/20/2005 09:22:32 AM-01/20/2005 09:22:32 AM
> $MsgTrackFlags:  0
> DeliveredDate:  01/20/2005 09:22:32 AM
> 
> Greetings!
> 
>   I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
> A message came in that was not spam that got blocked.  I took it to
> sa-learn and learned it as ham.
> 
> I want to take the message now and re-score it to see how it holds up.
> What is the best way of accomplishing this?
> 
> Jason
> 
> 
> 
> Received:  from p2kwshp1 ([10.67.3.129])          by
> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
> 2005012009323090:24101 ;          Thu, 20 Jan 2005 09:32:30 -0600
> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235150878; Thu, 20 Jan
> 2005 09:32:30 -0600
> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
> AE2DD11480; Thu, 20 Jan 2005 09:32:30 -0600 (CST)
> Received:  from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
> [134.130.3.130])  by smtp.transplace.com (Postfix) with ESMTP id A0F3E11447
> for <ky...@transplace.com>; Thu, 20 Jan 2005 09:32:28 -0600 (CST)
> Received:  from r220-1 (r220-1.rz.RWTH-Aachen.DE [134.130.3.31]) by
> ms-dienst.rz.rwth-aachen.de (iPlanet Messaging Server 5.2 HotFix 1.12
> (built Feb 13 2003)) with ESMTP id
> <0I...@ms-dienst.rz.rwth-aachen.de> for
> kyle.reynolds@transplace.com; Thu, 20 Jan 2005 16:28:26 +0100 (MET)
> Received:  from relay.rwth-aachen.de ([134.130.3.1])  by r220-1
> (MailMonitor for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:26:51 +0100 (MET)
> Received:  from hermes.rz.rwth-aachen.de (hermes.rz.RWTH-Aachen.DE
> [134.130.4.36])   by relay.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id
> j0KFQdUJ001781; Thu, 20 Jan 2005 16:26:39 +0100 (MET)
> Received:  from [134.130.4.36] (localhost [127.0.0.1])      by
> hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with ESMTP id
> j0KFHElg012554; Thu, 20 Jan 2005 16:20:48 +0100 (CET)
> Received:  from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
> [134.130.3.130])  by hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with
> ESMTP id    j0KFHBle012550 for <pr...@lists.RWTH-Aachen.DE>; Thu, 20 Jan
> 2005 16:17:11 +0100 (CET)
> Received:  from circe (circe.rz.RWTH-Aachen.DE [134.130.3.36])    by
> ms-dienst.rz.rwth-aachen.de   (iPlanet Messaging Server 5.2 HotFix 1.12
> (built Feb 13 2003))    with ESMTP id
> <0I...@ms-dienst.rz.rwth-aachen.de> for
> procmail@lists.RWTH-Aachen.DE (ORCPT procmail@lists.RWTH-Aachen.DE); Thu,
> 20 Jan 2005 16:17:10 +0100 (MET)
> Received:  from relay2.rwth-aachen.de ([134.130.3.6]) by circe (MailMonitor
> for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:17:09 +0100 (MET)
> Received:  from smtps-vbr2.xs4all.nl (smtps-vbr2.xs4all.nl [194.109.24.18])
> by relay2.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id j0KFH7st023252
> (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)     for
> <pr...@lists.RWTH-Aachen.DE>; Thu, 20 Jan 2005 16:17:07 +0100 (MET)
> Received:  from isop10 (velvet.isolution.nl [194.109.164.102])
> (authenticated bits=0)  by smtps-vbr2.xs4all.nl (8.12.11/8.12.11) with
> ESMTP id j0KFH715004012 for <pr...@lists.RWTH-Aachen.DE>; Thu, 20 Jan
> 2005 16:17:07 +0100 (CET envelope-from rvtol@isolution.nl)
> PostedDate:  01/20/2005 09:16:57 AM
> Principal:  "Ruud H.G. van Tol" <rv...@isolution.nl>
> Subject:  Re: Variable names
> From:  procmail-bounces@lists.RWTH-Aachen.DE
> SendTo:  "[procmail]" <pr...@lists.RWTH-Aachen.DE>
> Errors_To:  procmail-bounces@lists.RWTH-Aachen.DE
> $MessageID:  <00...@isolution.nl>
> Organization:  Chaos rules.
> MIME_Version:  1.0
> X_MimeOLE:  Produced By Microsoft MimeOLE V6.00.2800.1441
> $Mailer:  Microsoft Outlook Express 6.00.2800.1437
> DeliveryPriority:  N
> X_MSMail_Priority:  Normal
> Precedence:  list
> X_BeenThere:  procmail@lists.RWTH-Aachen.DE
> X_Virus_Scanned:  by XS4ALL Virus Scanner
> References:  <bc...@mail.gmail.com>
> <AN...@intrepid.com>
> <38...@anet.at>
> <Pi...@ayalon.eng.tau.ac.il>
> <39...@anet.at>
> <Pi...@localhost>
> X_Mailman_Version:  2.1.5
> list_post:  <ma...@lists.RWTH-Aachen.DE>
> List_Subscribe:  <http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
> <mailto:procmail-request@lists.RWTH-Aachen.DE?subject=subscribe>
> list_unsubscribe:
> <http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
> <mailto:procmail-request@lists.RWTH-Aachen.DE?subject=unsubscribe>
> List_Archive:  <http://mailman.RWTH-Aachen.de/pipermail/procmail>
> list_help:  <mailto:procmail-request@lists.RWTH-Aachen.DE?subject=help>
> List_Id:  discussion of the procmail program
> <procmail.lists.RWTH-Aachen.DE>
> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
> pfbspmp1.transplace.com
> X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
>       version=2.63
> X_Spam_Level:
> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
> 24, 2002) at 01/20/2005 09:32:30 AM,MIME-CD by Notes Client on Kyle
> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
> AM,MIME-CD complete at 01/20/2005 09:44:21 AM
> SMTPOriginator:  procmail-bounces@lists.RWTH-Aachen.DE
> $UpdatedBy:
> $Orig:
> Categories:
> $Revisions:
> RouteServers:  CN=psplotp1/O=com
> RouteTimes:  01/20/2005 09:32:30 AM-01/20/2005 09:32:31 AM
> $MsgTrackFlags:  0
> DeliveredDate:  01/20/2005 09:32:31 AM
> 
> Toen wij NM Public kietelden, kwam er dit uit:
> 
> 
>>Does anyone know if there are any
>>conventions for naming user-defined procmail variables?
> 
> 
> I (try to) follow a namespace-approach. Inside abc.inc
> I use abc_Varname for variables.
> 
> At the end of abc.inc I (should) unset all variables
> that have no business outside abc.inc.
> 
> I sometimes used double underscore for locals, so
> abc__Varname, but than an abc_Varname could also exist
> and that would be a new source of problems. An
> alternative would be abc_LOC_Varname.
> 
> 
> Inside .procmailrc, the special 'PM_' prefix could be
> chosen. And 'H_' for values derived from Headers, 'B_'
> for body-vars, 'G_' for common globals.
> 
> Some often used variables should stay as they are, like
> SPC, TAB, WSP (the one without []), NL, and such.
> 
> 
> 
>>Or for
>>user-defined variables in the Unix world in general?
> 
> 
> Both perl and PHP have namespaces. That helps a lot.
> 
> In a new procmail, we could have real namespaces, like
> namespace.Varname. And multiple matches, like MATCH1..
> MATCHn. And, and, ...
> 
> --
> Grtz, Ruud
> 
> ____________________________________________________________
> procmail mailing list   Procmail homepage: http://www.procmail.org/
> procmail@lists.RWTH-Aachen.DE
> http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail
> 
> 
> 
> Received:  from p2kwshp1 ([10.67.3.129])          by
> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
> 2005012009333540:24187 ;          Thu, 20 Jan 2005 09:33:35 -0600
> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235214958; Thu, 20 Jan
> 2005 09:33:34 -0600
> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
> D720B11481; Thu, 20 Jan 2005 09:33:34 -0600 (CST)
> Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
> smtp.transplace.com (Postfix) with SMTP id E49C811485 for
> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:33:33 -0600 (CST)
> Received:  (qmail 54834 invoked by uid 500); 20 Jan 2005 15:33:25 -0000
> Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
> Precedence:  bulk
> list_help:  <ma...@spamassassin.apache.org>
> list_unsubscribe:  <ma...@spamassassin.apache.org>
> list_post:  <ma...@spamassassin.apache.org>
> List_Id:  <users.spamassassin.apache.org>
> Delivered_To:  mailing list users@spamassassin.apache.org
> Received:  (qmail 54818 invoked by uid 99); 20 Jan 2005 15:33:25 -0000
> X_ASF_Spam_Status:  No, hits=1.8 required=10.0
> tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
> X_Spam_Check_By:  apache.org
> Received_SPF:  pass (hermes.apache.org: local policy)
> Received:  from rwcrmhc11.comcast.net (HELO rwcrmhc11.comcast.net)
> (204.127.198.35)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
> 07:33:23 -0800
> Received:  from mk.comcast.net
> (pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84])          by
> comcast.net (rwcrmhc11) with SMTP          id <200501201533200130090j09e>;
> Thu, 20 Jan 2005 15:33:21 +0000
> $MessageID:  <6....@mail.comcast.net>
> $Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
> PostedDate:  01/20/2005 09:33:22 AM
> SendTo:  "Jason Gauthier" <jg...@lastar.com>,"SPAMASSASSIN"
> <us...@spamassassin.apache.org>
> From:  Matt Kettler <mk...@comcast.net>
> Subject:  Re: Testing a message
> In_Reply_To:  <62...@server24.ctg.com>
> References:  <62...@server24.ctg.com>
> MIME_Version:  1.0
> X_Virus_Checked:  Checked
> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
> pfbspmp1.transplace.com
> X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
>       version=2.63
> X_Spam_Level:
> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
> 24, 2002) at 01/20/2005 09:33:35 AM,MIME-CD by Notes Client on Kyle
> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
> AM,MIME-CD complete at 01/20/2005 09:44:22 AM
> SMTPOriginator:
> users-return-22432-KyleReynolds=transplace.com@spamassassin.apache.org
> $UpdatedBy:
> $Orig:
> Categories:
> $Revisions:
> RouteServers:  CN=psplotp1/O=com
> RouteTimes:  01/20/2005 09:33:35 AM-01/20/2005 09:33:35 AM
> $MsgTrackFlags:  0
> DeliveredDate:  01/20/2005 09:33:35 AM
> 
> At 10:22 AM 1/20/2005, Jason Gauthier wrote:
> 
>>  I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
>>A message came in that was not spam that got blocked.  I took it to
>>sa-learn and learned it as ham.
>>
>>I want to take the message now and re-score it to see how it holds up.
>>What is the best way of accomplishing this?
> 
> 
> pipe it through the spamassassin command line:
> 
> spamassassin <message.txt
> 
> Optionaly you can add the -t parameter to force SA to generate a spam
> report, even if it's below the threshold (helpful to see all the rules).
> 
> Note: Make sure that sa-learn and spamassassin are being run as the same
> user than amavis will access spamassassin as. Otherwise you might be using
> a different bayes database (They default to being in $HOME)
> 
> 
> 
> 
> Received:  from p2kwshp1 ([10.67.3.129])          by
> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
> 2005012009345142:24260 ;          Thu, 20 Jan 2005 09:34:51 -0600
> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235291367; Thu, 20 Jan
> 2005 09:34:51 -0600
> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
> 44B3711481; Thu, 20 Jan 2005 09:34:51 -0600 (CST)
> Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
> smtp.transplace.com (Postfix) with SMTP id 3C2DE11457 for
> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:34:50 -0600 (CST)
> Received:  (qmail 58916 invoked by uid 500); 20 Jan 2005 15:34:40 -0000
> Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
> Precedence:  bulk
> list_help:  <ma...@spamassassin.apache.org>
> list_unsubscribe:  <ma...@spamassassin.apache.org>
> list_post:  <ma...@spamassassin.apache.org>
> List_Id:  <users.spamassassin.apache.org>
> Delivered_To:  mailing list users@spamassassin.apache.org
> Received:  (qmail 58903 invoked by uid 99); 20 Jan 2005 15:34:40 -0000
> X_ASF_Spam_Status:  No, hits=0.1 required=10.0  tests=FORGED_RCVD_HELO
> X_Spam_Check_By:  apache.org
> Received_SPF:  pass (hermes.apache.org: local policy)
> Received:  from smtp-vbr2.xs4all.nl (HELO smtp-vbr2.xs4all.nl)
> (194.109.24.22)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
> 07:34:38 -0800
> Received:  from webmail.xs4all.nl (webmail7.xs4all.nl [194.109.22.167]) by
> smtp-vbr2.xs4all.nl (8.12.11/8.12.11) with ESMTP id j0KFYXd5063471;
> Thu, 20 Jan 2005 16:34:34 +0100 (CET)     (envelope-from
> mvbengro@xs4all.nl)
> Received:  from 80.127.176.177        by webmail.xs4all.nl with HTTP;
> Thu, 20 Jan 2005 16:34:34 +0100 (CET)
> $MessageID:  <93...@80.127.176.177>
> In_Reply_To:  <62...@server24.ctg.com>
> References:  <62...@server24.ctg.com>
> PostedDate:  01/20/2005 09:34:34 AM
> Subject:  Re: Testing a message
> From:  "Menno van Bennekom" <mv...@xs4all.nl>
> SendTo:  "Jason Gauthier" <jg...@lastar.com>
> CopyTo:  "SPAMASSASSIN" <us...@spamassassin.apache.org>
> ReplyTo:  mvbengro@xs4all.nl
> User_Agent:  SquirrelMail/1.4.3a
> $Mailer:  SquirrelMail/1.4.3a
> MIME_Version:  1.0
> X_Virus_Scanned:  by XS4ALL Virus Scanner
> X_Virus_Checked:  Checked
> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
> pfbspmp1.transplace.com
> X_Spam_Status:  No, hits=-4.6 required=4.0 tests=AWL,BAYES_00 autolearn=ham
>       version=2.63
> X_Spam_Level:
> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
> 24, 2002) at 01/20/2005 09:34:51 AM,MIME-CD by Notes Client on Kyle
> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
> AM,MIME-CD complete at 01/20/2005 09:44:22 AM
> SMTPOriginator:
> users-return-22433-KyleReynolds=transplace.com@spamassassin.apache.org
> $UpdatedBy:
> $Orig:
> Categories:
> $Revisions:
> RouteServers:  CN=psplotp1/O=com
> RouteTimes:  01/20/2005 09:34:51 AM-01/20/2005 09:34:51 AM
> $MsgTrackFlags:  0
> DeliveredDate:  01/20/2005 09:34:51 AM
> 
> 
>>Greetings!
>>
>>  I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
>>A message came in that was not spam that got blocked.  I took it to
>>sa-learn and learned it as ham.
>>
>>I want to take the message now and re-score it to see how it holds up.
>>What is the best way of accomplishing this?
>>
>>Jason
> 
> You probably did something like 'cat message | sa-learn --ham' to learn it
> as ham. Like that you can do 'cat message | sendmail user@domain.tld' to
> send it again. Or you can do 'cat message | spamassassin -D' to just
> evaluate what spamassassin would have done with the message.
> 
> Menno van Bennekom
> 
> 
> 
> Received:  from p2kwshp1 ([10.67.3.129])          by
> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
> 2005012009351447:24295 ;          Thu, 20 Jan 2005 09:35:14 -0600
> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235314196; Thu, 20 Jan
> 2005 09:35:14 -0600
> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
> 121DD11460; Thu, 20 Jan 2005 09:35:14 -0600 (CST)
> Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
> smtp.transplace.com (Postfix) with SMTP id D7E7011440 for
> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:35:12 -0600 (CST)
> Received:  (qmail 59655 invoked by uid 500); 20 Jan 2005 15:34:45 -0000
> Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
> Precedence:  bulk
> list_help:  <ma...@spamassassin.apache.org>
> list_unsubscribe:  <ma...@spamassassin.apache.org>
> list_post:  <ma...@spamassassin.apache.org>
> List_Id:  <users.spamassassin.apache.org>
> Delivered_To:  mailing list users@spamassassin.apache.org
> Received:  (qmail 59591 invoked by uid 500); 20 Jan 2005 15:34:44 -0000
> Delivered_To:  apmail-incubator-spamassassin-users@incubator.apache.org
> Received:  (qmail 59459 invoked by uid 99); 20 Jan 2005 15:34:43 -0000
> X_ASF_Spam_Status:  No, hits=1.8 required=10.0
> tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
> X_Spam_Check_By:  apache.org
> Received_SPF:  pass (hermes.apache.org: local policy)
> Received:  from rwcrmhc13.comcast.net (HELO rwcrmhc13.comcast.net)
> (204.127.198.39)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
> 07:34:43 -0800
> Received:  from mk.comcast.net
> (pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84])          by
> comcast.net (rwcrmhc13) with SMTP          id <2005012015343501500d5spde>;
> Thu, 20 Jan 2005 15:34:41 +0000
> $MessageID:  <6....@mail.comcast.net>
> $Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
> PostedDate:  01/20/2005 09:34:38 AM
> SendTo:  "Thomas Kinghorn [MTNNS -Rosebank]"
> <th...@incubator.apache.org>
> From:  Matt Kettler <mk...@comcast.net>
> Subject:  Re: Spamassassin 3.0.2 child processes
> In_Reply_To:  <91B75F7537DD0E45BDFB937AFE43420930A909@bonsai.int.mtnns.ne
> t>
> References:  <91...@bonsai.int.mtnns.net>
> MIME_Version:  1.0
> X_Virus_Checked:  Checked
> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
> pfbspmp1.transplace.com
> X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
>       version=2.63
> X_Spam_Level:
> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
> 24, 2002) at 01/20/2005 09:35:14 AM,MIME-CD by Notes Client on Kyle
> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
> AM,MIME-CD complete at 01/20/2005 09:44:22 AM
> SMTPOriginator:
> users-return-22434-KyleReynolds=transplace.com@spamassassin.apache.org
> $UpdatedBy:
> $Orig:
> Categories:
> $Revisions:
> RouteServers:  CN=psplotp1/O=com
> RouteTimes:  01/20/2005 09:35:14 AM-01/20/2005 09:35:14 AM
> $MsgTrackFlags:  0
> DeliveredDate:  01/20/2005 09:35:14 AM
> 
> At 06:58 AM 1/20/2005, Thomas Kinghorn [MTNNS -Rosebank] wrote:
> 
>>Is there a way to limit spamd child processes?
>>
>># ps -ef | grep spam
>>
>>root       602     1  0 13:28 ?        00:00:12 /usr/bin/spamd -d -c -m5
> 
> -H
> 
>>xadmin     649   602  0 13:29 ?        00:00:09 spamd child
>>xadmin     650   602  0 13:29 ?        00:00:07 spamd child
>>xadmin     651   602  0 13:29 ?        00:00:13 spamd child
>>root       652   602  0 13:29 ?        00:00:10 spamd child
>>root       653   602  0 13:29 ?        00:00:08 spamd child
> 
> 
> 
> Yes, with the -m parameter you are already using.  You've got -m5, spamd
> has 5 children.. set it to -m2 and you'll get 2.
> 
> 
> 
> 
> Received:  from p2kwshp1 ([10.67.3.129])          by
> psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
> 2005012009354443:24330 ;          Thu, 20 Jan 2005 09:35:44 -0600
> Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
> (WebShield SMTP v4.5 MR1a P0803.345);     id 1106235344541; Thu, 20 Jan
> 2005 09:35:44 -0600
> Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
> 63A2811457; Thu, 20 Jan 2005 09:35:44 -0600 (CST)
> Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
> smtp.transplace.com (Postfix) with SMTP id B5DDF1148D for
> <Ky...@transplace.com>; Thu, 20 Jan 2005 09:35:34 -0600 (CST)
> Received:  (qmail 60113 invoked by uid 500); 20 Jan 2005 15:34:49 -0000
> Mailing_List:  contact users-help@spamassassin.apache.org; run by ezmlm
> Precedence:  bulk
> list_help:  <ma...@spamassassin.apache.org>
> list_unsubscribe:  <ma...@spamassassin.apache.org>
> list_post:  <ma...@spamassassin.apache.org>
> List_Id:  <users.spamassassin.apache.org>
> Delivered_To:  mailing list users@spamassassin.apache.org
> Received:  (qmail 59968 invoked by uid 500); 20 Jan 2005 15:34:47 -0000
> Delivered_To:  apmail-incubator-spamassassin-users@incubator.apache.org
> Received:  (qmail 59936 invoked by uid 99); 20 Jan 2005 15:34:47 -0000
> X_ASF_Spam_Status:  No, hits=0.0 required=10.0  tests=
> X_Spam_Check_By:  apache.org
> Received_SPF:  neutral (hermes.apache.org: local policy)
> Received:  from mailgate1.dslextreme.com (HELO mailgate1.dslextreme.com)
> (66.51.199.94)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
> 07:34:45 -0800
> Received:  from mail5.dslextreme.com (unknown [192.168.7.93])     by
> mailgate1.dslextreme.com (Postfix) with SMTP id 80D59630309 for
> <sp...@incubator.apache.org>; Thu, 20 Jan 2005 07:32:11 -0800
> (PST)
> Received:  (qmail 1604 invoked from network); 20 Jan 2005 15:34:42 -0000
> Received:  from unknown (HELO espphotography.dslextreme.com)
> (66.245.217.196)  by mail5.dslextreme.com with SMTP; Thu, 20 Jan 2005
> 07:34:42 -0800
> $MessageID:  <6....@pop.garc.com>
> $Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
> PostedDate:  01/20/2005 09:34:36 AM
> SendTo:  spamassassin-users@incubator.apache.org
> From:  Evan Platt <ev...@espphotography.com>
> Subject:  Re: Testing a message
> In_Reply_To:  <62...@server24.ctg.com>
> References:  <62...@server24.ctg.com>
> MIME_Version:  1.0
> X_DSLExtreme_MailGate_Information:  Please contact the ISP for more
> information
> X_DSLExtreme_MailGate:  Found to be clean
> X_MailScanner_From:  evan@espphotography.com
> X_Virus_Checked:  Checked
> X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
> pfbspmp1.transplace.com
> X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
>       version=2.63
> X_Spam_Level:
> $MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
> 24, 2002) at 01/20/2005 09:35:44 AM,MIME-CD by Notes Client on Kyle
> Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
> AM,MIME-CD complete at 01/20/2005 09:44:22 AM
> SMTPOriginator:
> users-return-22435-KyleReynolds=transplace.com@spamassassin.apache.org
> $UpdatedBy:
> $Orig:
> Categories:
> $Revisions:
> RouteServers:  CN=psplotp1/O=com
> RouteTimes:  01/20/2005 09:35:44 AM-01/20/2005 09:35:44 AM
> $MsgTrackFlags:  0
> DeliveredDate:  01/20/2005 09:35:44 AM
> 
> At 07:22 AM 1/20/2005, you wrote:
> 
> 
>>Greetings!
>>
>>  I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
>>A message came in that was not spam that got blocked.  I took it to
>>sa-learn and learned it as ham.
>>
>>I want to take the message now and re-score it to see how it holds up.
>>What is the best way of accomplishing this?
> 
> 
> Someone will I'm sure correct me if I'm wrong...
> 
> but back when I was a geek in training, I could save the message to a file,
> and run
> 
> spamassassin < filename1 > filename2
> 
> where filename1 was the original file, filename2 is the output file that SA
> would create with the new score.
> 
> This may have changed...
> 
> Evan
> 
> **********************************************************************************************************************************************************************************
> 
> 
> Thanks,
> 
> 
> Kyle Reynolds
> 972-731-4731
> KyleReynolds@Transplace.com
> 
> 
>