You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Rob Blomquist <ro...@verizon.net> on 2004/08/31 03:40:53 UTC

BAYES_99 Picking Ham as Spam

I am getting a about 2% of my mail that is clean HAM marked as spam by 
BAYES_99  as being 99-100% spam.

What can I do about it? How does BAYES_99 pick spam? I assume its a baysian 
filter....

Rob
-- 

Linux Desktop user since 2000,
Home networker since shortly after.

Linux User #183693
http://counter.li.org/

Re: BAYES_99 Picking Ham as Spam

Posted by Rob Blomquist <ro...@verizon.net>.
On Monday 30 August 2004 10:24 pm, Rob Blomquist wrote:
> On Monday 30 August 2004 9:34 pm, John Andersen wrote:
> > On Monday 30 August 2004 05:40 pm, Rob Blomquist wrote:
> > > I am getting a about 2% of my mail that is clean HAM marked as spam by
> > > BAYES_99  as being 99-100% spam.
> > >
> > > What can I do about it? How does BAYES_99 pick spam? I assume its a
> > > baysian filter....
> > >
> > > Rob
> >
> > You need to save these mails that are falsely called spam
> > and use sa-learn to teach bays database that they are not
> > spam.  Bayes filters need to be trained before they can
> > be trusted 100%

I have no reason to understand why I had to retrain SA last night, but that 
trick seems to have taught it a good lesson.

Thanks for the reminder to try retraining it.

Rob

-- 

Linux Desktop user since 2000,
Home networker since shortly after.

Linux User #183693
http://counter.li.org/

Re: BAYES_99 Picking Ham as Spam

Posted by John Andersen <js...@pen.homeip.net>.
On Tuesday 31 August 2004 09:32 pm, Rob Blomquist wrote:
> > Rob, you have to feed sa-learn two different bunches of mail.
> > One known spam and the other known ham.  You have to continually
> > train it with missed spam/ham.
> >
> > I do this by having users create two separate maildirs in their Mail
> > directory, one named NotSpam and the other named MissedSpam.
> >
> > Then I run the following script nightly via cron.  I had to hack it
> > a bit because the original was for mbox, not maildir
> >
> > #!/usr/bin/perl
>
> Nice script. I would love to try it out, but what I do is run it against my
> mailboxes, and sa-learn skips messages it has sent.
>
> How could I modify it to replace my poorly written script?
>
> echo "SpamPile"
> sa-learn --spam ~/.Mail/SpamPile/cur/
> echo "inbox"
> sa-learn --ham ~/.Mail/inbox/cur/
> echo "Ads"
> sa-learn --ham ~/.Mail/Ads/cur/
> echo "VFB'
> sa-learn --ham ~/.Mail/VFB/cur/

Well you will note that the script says nothing about how
spam and ham gets into the spam and misses spam maildirs.
This depends on the MUA the users use.  I use Kmail and can
simply drag spam to the missed spam box it it will do it
correctly.  Other user agents hork up the mail when doing
this such that it might not be recognized.

I don't find I have to feed it all the mail on a continuing basis. (Thats what 
auto learn is supposed to do).  Just the mail it misses, FPos and FNegs.

Why on earth would you want to learn Ads as ham?
a

-- 
_____________________________________
John Andersen

Re: BAYES_99 Picking Ham as Spam

Posted by Rob Blomquist <ro...@verizon.net>.
> Rob, you have to feed sa-learn two different bunches of mail.
> One known spam and the other known ham.  You have to continually
> train it with missed spam/ham.
>
> I do this by having users create two separate maildirs in their Mail
> directory, one named NotSpam and the other named MissedSpam.
>
> Then I run the following script nightly via cron.  I had to hack it
> a bit because the original was for mbox, not maildir
>
> #!/usr/bin/perl

Nice script. I would love to try it out, but what I do is run it against my 
mailboxes, and sa-learn skips messages it has sent.

How could I modify it to replace my poorly written script?

echo "SpamPile"
sa-learn --spam ~/.Mail/SpamPile/cur/
echo "inbox"
sa-learn --ham ~/.Mail/inbox/cur/
echo "Ads"
sa-learn --ham ~/.Mail/Ads/cur/
echo "VFB'
sa-learn --ham ~/.Mail/VFB/cur/

-- 

Linux Desktop user since 2000,
Home networker since shortly after.

Linux User #183693
http://counter.li.org/

Re: BAYES_99 Picking Ham as Spam

Posted by John Andersen <js...@pen.homeip.net>.
On Monday 30 August 2004 09:24 pm, Rob Blomquist wrote:
> On Monday 30 August 2004 9:34 pm, John Andersen wrote:
> > On Monday 30 August 2004 05:40 pm, Rob Blomquist wrote:
> > > I am getting a about 2% of my mail that is clean HAM marked as spam by
> > > BAYES_99  as being 99-100% spam.
> > >
> > > What can I do about it? How does BAYES_99 pick spam? I assume its a
> > > baysian filter....
> > >
> > > Rob
> >
> > You need to save these mails that are falsely called spam
> > and use sa-learn to teach bays database that they are not
> > spam.  Bayes filters need to be trained before they can
> > be trusted 100%
> >
> > man sa-learn has some info about this.
>
> sa-learn runs against all my mail at exactly 18:42 everyday. And it never
> seems to be getting it right. I ran it against 11,000 ham messages the
> night I reinstalled it, but still no help.
>
> Rob

Rob, you have to feed sa-learn two different bunches of mail.
One known spam and the other known ham.  You have to continually
train it with missed spam/ham.

I do this by having users create two separate maildirs in their Mail
directory, one named NotSpam and the other named MissedSpam.

Then I run the following script nightly via cron.  I had to hack it
a bit because the original was for mbox, not maildir

#!/usr/bin/perl

###################################################################
# A script to automatically update SpamAssassin's Bayesian filter
# Michael Reynolds - michael@spinweb.net
# SpinWeb Net Designs - http://www.spinweb.net
###################################################################

# set some variables
$SA_LEARN = "/usr/bin/sa-learn";
$HOME = "/home";
$FOLDER_DIR = "Mail";
$MISSEDSPAM_FOLDER = "MissedSpam";
$NOTSPAM_FOLDER = "NotSpam";

# get a listing of users
@user = `ls -1 $HOME`;

# loop and process
for($i=0;$i<@user;$i++)
{
        # trim carriage return
        chop($user[$i]);

        # define where ham is located
        my $user_notspam_folder = 
"$HOME/$user[$i]/$FOLDER_DIR/$NOTSPAM_FOLDER/cur";

        # if the folder exists, learn from it
        if(-e $user_notspam_folder)
        {
                system("$SA_LEARN  --ham $user_notspam_folder/*");
                system("rm  $user_notspam_folder/*");
        }

        # define where spam is located
        my $user_missedspam_folder = 
"$HOME/$user[$i]/$FOLDER_DIR/$MISSEDSPAM_FOLDER/cur";

        # if the folder exists, learn from it
        if(-e $user_missedspam_folder)
        {
                system("$SA_LEARN  --spam $user_missedspam_folder/*");
                system("rm  $user_missedspam_folder/*");
        }
}

# rebuild the database
system("$SA_LEARN --rebuild");

--------------------------end

Note, whereever you see a trailing = sing, wrapping took place above.

-- 
_____________________________________
John Andersen

Re: BAYES_99 Picking Ham as Spam

Posted by Rob Blomquist <ro...@verizon.net>.
On Monday 30 August 2004 9:34 pm, John Andersen wrote:
> On Monday 30 August 2004 05:40 pm, Rob Blomquist wrote:
> > I am getting a about 2% of my mail that is clean HAM marked as spam by
> > BAYES_99  as being 99-100% spam.
> >
> > What can I do about it? How does BAYES_99 pick spam? I assume its a
> > baysian filter....
> >
> > Rob
>
> You need to save these mails that are falsely called spam
> and use sa-learn to teach bays database that they are not
> spam.  Bayes filters need to be trained before they can
> be trusted 100%
>
> man sa-learn has some info about this.

sa-learn runs against all my mail at exactly 18:42 everyday. And it never 
seems to be getting it right. I ran it against 11,000 ham messages the night 
I reinstalled it, but still no help.

Rob
-- 

Linux Desktop user since 2000,
Home networker since shortly after.

Linux User #183693
http://counter.li.org/

Re: BAYES_99 Picking Ham as Spam

Posted by John Andersen <js...@pen.homeip.net>.
On Monday 30 August 2004 05:40 pm, Rob Blomquist wrote:
> I am getting a about 2% of my mail that is clean HAM marked as spam by
> BAYES_99  as being 99-100% spam.
>
> What can I do about it? How does BAYES_99 pick spam? I assume its a baysian
> filter....
>
> Rob

You need to save these mails that are falsely called spam 
and use sa-learn to teach bays database that they are not
spam.  Bayes filters need to be trained before they can
be trusted 100%

man sa-learn has some info about this.

-- 
_____________________________________
John Andersen

Re: BAYES_99 Picking Ham as Spam

Posted by Rob Blomquist <ro...@verizon.net>.
On Monday 30 August 2004 6:40 pm, Rob Blomquist wrote:
> I am getting a about 2% of my mail that is clean HAM marked as spam by
> BAYES_99  as being 99-100% spam.
>
> What can I do about it? How does BAYES_99 pick spam? I assume its a baysian
> filter....

And mind you, 2% of my mail is 6 messages a day.

Here's some of the emails:
============================#1/3========================
Received: from localhost by Timmy
	with SpamAssassin (2.63 2004-01-11);
	Mon, 30 Aug 2004 07:36:10 -0700
From: "Mike Morris" <mm...@vicam.com>
To: <vf...@troutnet.com>
Subject: RE: [VFB] Inshore Salt water fly swap
Date: Mon, 30 Aug 2004 10:39:13 -0500
Message-Id: <00...@DARWIN>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on Timmy
X-Spam-Level: *****
X-Spam-Status: Yes, hits=5.4 required=5.0 tests=BAYES_99 autolearn=no 
	version=2.63
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----------=_41333B5A.4BD618F0"
X-UID: 
Status: RO
X-Status: RP
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent: 

This is a multi-part message in MIME format.

------------=_41333B5A.4BD618F0
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "Timmy", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Steve; I've been off list for the last week and a half
  or so and missed the Saltwater announcement. I was going to see if
  there was interest in a X-mas swap for Saltwater but you beat me to it.
  Is there still room for one more in this swap? [...] 

Content analysis details:   (5.4 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 5.4 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 0.9998]



------------=_41333B5A.4BD618F0
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Return-path: <ma...@troutnet.com>
Envelope-to: robbo@virtualflybox.com
Delivery-date: Mon, 30 Aug 2004 09:33:03 -0500
Received: from [209.15.2.13] (helo=phoebe.hosting4u.net)
	by green.mynethost.com with smtp (Exim 4.30)
	id 1C1nDT-0007N2-LM
	for robbo@virtualflybox.com; Mon, 30 Aug 2004 09:33:03 -0500
Received: (qmail 20743 invoked by alias); 30 Aug 2004 14:32:56 -0000
Delivered-To: taurus-troutne-vfb-list@phoebe.hosting4u.net
Received: (qmail 20740 invoked by alias); 30 Aug 2004 14:32:56 -0000
From: "Mike Morris" <mm...@vicam.com>
To: <vf...@troutnet.com>
Subject: RE: [VFB] Inshore Salt water fly swap
Date: Mon, 30 Aug 2004 10:39:13 -0500
Message-ID: <00...@DARWIN>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
In-Reply-To: <00...@steve>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Rcpt-To: <vf...@troutnet.com>
Sender: majordomo-owner@troutnet.com
Precedence: bulk
Reply-To: <vf...@troutnet.com>

Steve;

I've been off list for the last week and a half or so and missed the
Saltwater announcement.  I was going to see if there was interest in a
X-mas swap for Saltwater but you beat me to it.  Is there still room for
one more in this swap?

Mike M.=20

-----Original Message-----
From: majordomo-owner@troutnet.com [mailto:majordomo-owner@troutnet.com]
On Behalf Of Steve
Sent: Friday, August 20, 2004 6:45 PM
To: vfb@troutnet.com
Subject: RE: [VFB] Inshore Salt water fly swap

Send to=20
Steve Clark
21550 Box Springs Road
Apartment 2054
Moreno Valley, CA
92557

951-259-6688

=20

Steve Clark
Moreno Valley, Ca.
http://www.deepcreekflyfishers.org/

Check out our new warm water fly fishing list

http://www.deepcreekflyfishers.org/warm_water_fly_fishing_list.htm

The only difference between a good day and a bad day is our attitude.=20
><((((=BA>`=95.=B8=B8=B4=AF`=95.=B8.=95=B4=AF`=95...=B8>(((=BA>
.=95=B4=AF`=95.><((((=BA>`=95.=B8=B8.=95=B4=AF`=95.=B8.=95=B4=AF`=95...=B8=
><((((=BA>=20


-----Original Message-----
From: majordomo-owner@troutnet.com [mailto:majordomo-owner@troutnet.com]
On Behalf Of Scott J Crosby
Sent: Friday, August 20, 2004 4:37 PM
To: vfb@troutnet.com
Subject: Re: [VFB] Inshore Salt water fly swap

Please send address
I will have these done tonight, will get them out soon
Scott
On Fri, 20 Aug 2004 16:31:17 -0700 "Steve" <sj...@adelphia.net>
writes:
>=20
>=20
>=20
> Is this ok you everybody so far?
> http://www.deepcreekflyfishers.org/inshore_salt_wate
> r_fly_swap.htm
>=20
>=20
>=20
> inshore Salt water fly swap limit
> 10 flies.
> Any salt water fly pattern, for 6-8 wt. rods=20
> A due date of January 30th.
>=20
> I would like to get enough people entrusted so we
> can have an Off Shore Fly Swap.
> This will be a separate fly swap
> Please refer to it as the Off Shore fly swap.
>=20
>=20
> This is link for patterns
> http://www.saltwaterflies.com/theflies.html
> FLY TYING instructions are on the left.
> http://www.saltwaterflies.com/sitemap.html
>                 =20
>                =20
> 1.    Steve Clark - Anchovy Zonker
> 2.    Scott Crosby - CRAZY Charlie
> 3.    Vagn Hansen - a Danish fly called Polar Magnus
> 4.    Buggs - Awesome hair sardin=E1 pattern
> 5.    Ashley- awesome hair thingy
> 6.    George Church - ???????? Fly
> 7.    .
> 8.    .
> 9.    .
> 10..
>                  =20
>                   =20
> Steve Clark
> Moreno Valley, Ca.
> http://www.deepcreekflyfishers.org/
> Check out our new warm water fly fishing list
>         =20
> http://www.deepcreekflyfishers.org/warm_water_fly_fi
> shing_list.htm
> The only difference between a good day and a bad day
>=20
> is our attitude.=20
> ><((((=BA>`*.=B8=B8=B4=AF`*.=B8.*=B4=AF`*...=B8>(((=BA>
> .*=B4=AF`*.><((((=BA>`*.=B8=B8.*=B4=AF`*.=B8.*=B4=AF`*...=B8><((((=BA> =

>                =20
======================#2/3=============================
Received: from localhost by Timmy
	with SpamAssassin (2.63 2004-01-11);
	Sat, 28 Aug 2004 12:13:46 -0700
From: ostap110@ftml.net
To: newbie@linux-mandrake.com
Subject: [newbie] mouse & kboard dont work
Date: Sat, 28 Aug 2004 12:12:03 -0700
Message-Id: <10...@webmail.messagingengine.com>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on Timmy
X-Spam-Level: ******
X-Spam-Status: Yes, hits=6.6 required=5.0 tests=BAYES_99,FROM_ENDS_IN_NUMS,
	NO_REAL_NAME autolearn=no version=2.63
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----------=_4130D96A.2E06503B"
X-UID: 
Status: RO
X-Status: RP
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent: 

This is a multi-part message in MIME format.

------------=_4130D96A.2E06503B
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "Timmy", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  .. Hi i have an old keyboard "gateway2000" (the one
  that has 12 'f' buttons onn the far left), and a relatively new simple
  laser logitech mouse. It's USB, but I use the P/S 2 adapter that it
  came with. Whenever I boot mandrake, the keyboard stops working. I
  tried fixing that by, going thourgh the Install, and disabling all the
  services. Then it works, but when i try to start the x window, neither
  keyboard nor mouse works. [...] 

Content analysis details:   (6.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.2 NO_REAL_NAME           From: does not include a real name
 1.0 FROM_ENDS_IN_NUMS      From: ends in numbers
 5.4 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_4130D96A.2E06503B
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path: <ne...@linux-mandrake.com>
Received: from smtp.mandrake.com ([192.168.1.3]) by mta014.verizon.net
          (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
          id <20...@smtp.mandrake.com>;
          Sat, 28 Aug 2004 14:13:13 -0500
Received: from smtp.mandrake.com (212.85.147.176) by sc018pub.verizon.net 
(MailPass SMTP server v1.1.1 - 121803235448JY) with  SMTP id 
<3-1000-193-1000-13323-1-1093720393> for mta014.verizon.net; Sat, 28 Aug 2004 
14:13:14 -0500
Received: from smtp.mandrax.org (smtp.mandrax.org [212.85.147.169])
	by smtp.mandrake.com (Postfix) with ESMTP
	id 0A3D183C0C; Sat, 28 Aug 2004 20:25:03 +0200 (CEST)
Received: by smtp.mandrax.org (Postfix, from userid 500)
	id 0B32E56A20; Sat, 28 Aug 2004 21:13:13 +0200 (CEST)
Delivered-To: newbie@linux-mandrake.com
Received: from frontend1.messagingengine.com (frontend1.messagingengine.com 
[66.111.4.30])
	by smtp.mandrax.org (Postfix) with ESMTP id 8DD1956A08
	for <ne...@linux-mandrake.com>; Sat, 28 Aug 2004 21:12:04 +0200 (CEST)
Received: from server3.messagingengine.com (server3.internal [10.202.2.134])
	by frontend1.messagingengine.com (Postfix) with ESMTP id D9F28C14F7D
	for <ne...@linux-mandrake.com>; Sat, 28 Aug 2004 15:12:01 -0400 (EDT)
Received: by server3.messagingengine.com (Postfix, from userid 99)
	id 26AD317E35F; Sat, 28 Aug 2004 15:12:03 -0400 (EDT)
MIME-Version: 1.0
X-Mailer: MIME::Lite 1.4  (F2.72; T1.001; A1.62; B3.01; Q3.01)
To: newbie@linux-mandrake.com
Date: Sat, 28 Aug 2004 12:12:03 -0700
From: ostap110@ftml.net
X-Sasl-Enc: P9Em80s3eJcxtDv3EZzQOA 1093720323
Message-Id: <10...@webmail.messagingengine.com>
Reply-To: newbie@linux-mandrake.com
X-Loop: newbie@linux-mandrake.com
X-Sequence: 577
Precedence: list
List-Help: <mailto:sympa@linux-mandrake.com?subject=help>
List-Subscribe: <mailto:sympa@linux-mandrake.com?subject=subscribe%20newbie>
List-Unsubscribe: 
<mailto:sympa@linux-mandrake.com?subject=unsubscribe%20newbie>
List-Post: <ma...@linux-mandrake.com>
List-Owner: <ma...@linux-mandrake.com>
Subject: [newbie] mouse & kboard dont work
Content-type: multipart/mixed; boundary="----------=_1093720379-12666-1463"
Sender: newbie-owner@linux-mandrake.com

This is a multi-part message in MIME format...

------------=_1093720379-12666-1463
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="ISO-8859-1"

Hi i have an old keyboard "gateway2000" (the one that has 12 'f' buttons
onn the far left), and a relatively new simple laser logitech mouse.
It's USB, but I use the P/S 2 adapter that it came with. Whenever I boot
mandrake, the keyboard stops working. I tried fixing that by, going
thourgh the Install, and disabling all the services. Then it works, but
when i try to start the x window, neither keyboard nor mouse works. 

Mandrake is really nice, and i just wanna have a working system with
printing (btw mandrake is great at setting up printers) and Icewm. I
really would appreciate if you could help me. 
Regards 
N. 


------------=_1093720379-12666-1463
Content-Type: text/plain; name="message.footer"
Content-Disposition: inline; filename="message.footer"
Content-Transfer-Encoding: 8bit

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

------------=_1093720379-12666-1463--

------------=_4130D96A.2E06503B--
========================#3/3===========================
Received: from localhost by Timmy
	with SpamAssassin (2.63 2004-01-11);
	Sat, 28 Aug 2004 06:14:55 -0700
From: Paul Smith <ph...@hotpop.com>
To: newbie@linux-mandrake.com
Subject: [newbie] Enlarging Mandrake's partition
Date: Sat, 28 Aug 2004 14:12:48 +0100
Message-Id: <41...@hotpop.com>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on Timmy
X-Spam-Level: *******
X-Spam-Status: Yes, hits=7.6 required=5.0 tests=BAYES_99,FROM_ENDS_IN_NUMS,
	RATWR10_MESSID,SARE_RECV_IP_082154 autolearn=no version=2.63
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----------=_4130854F.D12A7D4F"
X-UID: 
Status: RO
X-Status: RP
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent: 

This is a multi-part message in MIME format.

------------=_4130854F.D12A7D4F
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "Timmy", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  .. Dear All My computer has a dual boot (Mandrake 10
  and Windows2000) and I would like to enlarge Mandrake's partition at
  the expense of reducing Windows2000 partition. So, I am here asking for
  advice about the safest and the fastest way of doing this operation.
  [...] 

Content analysis details:   (7.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.1 SARE_RECV_IP_082154    Passed through possible spammer relay or source
 1.0 FROM_ENDS_IN_NUMS      From: ends in numbers
 0.1 RATWR10_MESSID         ratware pattern (HEXHEX.HEXHEX@)
 5.4 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 0.9992]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_4130854F.D12A7D4F
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path: <ne...@linux-mandrake.com>
Received: from smtp.mandrake.com ([192.168.1.2]) by mta009.verizon.net
          (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
          id <20...@smtp.mandrake.com>;
          Sat, 28 Aug 2004 08:14:00 -0500
Received: from smtp.mandrake.com (212.85.147.176) by sc001pub.verizon.net 
(MailPass SMTP server v1.1.1 - 121803235448JY) with  SMTP id 
<3-14855-51-14855-152773-1-1093698839> for mta009.verizon.net; Sat, 28 Aug 
2004 08:14:00 -0500
Received: from smtp.mandrax.org (smtp.mandrax.org [212.85.147.169])
	by smtp.mandrake.com (Postfix) with ESMTP
	id 730A483C35; Sat, 28 Aug 2004 14:25:53 +0200 (CEST)
Received: by smtp.mandrax.org (Postfix, from userid 500)
	id 6077156A0C; Sat, 28 Aug 2004 15:13:58 +0200 (CEST)
Delivered-To: newbie@linux-mandrake.com
Received: from smtp-out.hotpop.com (smtp-out.hotpop.com [38.113.3.71])
	by smtp.mandrax.org (Postfix) with ESMTP id 8FE7D56A0A
	for <ne...@linux-mandrake.com>; Sat, 28 Aug 2004 15:13:08 +0200 (CEST)
Received: from hotpop.com (kubrick.hotpop.com [38.113.3.103])
	by smtp-out.hotpop.com (Postfix) with SMTP id C6C4210AAC55
	for <ne...@linux-mandrake.com>; Sat, 28 Aug 2004 13:13:06 +0000 (UTC)
Received: from [192.168.1.2] (adslsapo-b5-208-94.telepac.pt [82.154.208.94])
	by smtp-1.hotpop.com (Postfix) with ESMTP id 08B741A0093
	for <ne...@linux-mandrake.com>; Sat, 28 Aug 2004 13:13:03 +0000 (UTC)
Message-ID: <41...@hotpop.com>
Date: Sat, 28 Aug 2004 14:12:48 +0100
From: Paul Smith <ph...@hotpop.com>
User-Agent: Mozilla Thunderbird 0.7.3 (X11/20040803)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: newbie@linux-mandrake.com
X-HotPOP: -----------------------------------------------
                   Sent By HotPOP.com FREE Email
             Get your FREE POP email at www.HotPOP.com
          -----------------------------------------------
Reply-To: newbie@linux-mandrake.com
X-Loop: newbie@linux-mandrake.com
X-Sequence: 550
Precedence: list
List-Help: <mailto:sympa@linux-mandrake.com?subject=help>
List-Subscribe: <mailto:sympa@linux-mandrake.com?subject=subscribe%20newbie>
List-Unsubscribe: 
<mailto:sympa@linux-mandrake.com?subject=unsubscribe%20newbie>
List-Post: <ma...@linux-mandrake.com>
List-Owner: <ma...@linux-mandrake.com>
Subject: [newbie] Enlarging Mandrake's partition
Content-type: multipart/mixed; boundary="----------=_1093698825-12666-1401"
Sender: newbie-owner@linux-mandrake.com

This is a multi-part message in MIME format...

------------=_1093698825-12666-1401
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Dear All

My computer has a dual boot (Mandrake 10 and Windows2000) and I would 
like to enlarge Mandrake's partition at the expense of reducing 
Windows2000 partition. So, I am here asking for advice about the safest 
and the fastest way of doing this operation.

Thanks in advance,

Paul



------------=_1093698825-12666-1401
Content-Type: text/plain; name="message.footer"
Content-Disposition: inline; filename="message.footer"
Content-Transfer-Encoding: 8bit

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

------------=_1093698825-12666-1401--

------------=_4130854F.D12A7D4F--



-- 

Linux Desktop user since 2000,
Home networker since shortly after.

Linux User #183693
http://counter.li.org/

Re: BAYES_99 Picking Ham as Spam

Posted by Matt Kettler <mk...@comcast.net>.
At 06:40 PM 8/30/2004 -0700, Rob Blomquist wrote:
>I am getting a about 2% of my mail that is clean HAM marked as spam by
>BAYES_99  as being 99-100% spam.
>
>What can I do about it? How does BAYES_99 pick spam? I assume its a baysian
>filter....

Yes, it's a bayes filter. You can turn it off, or start again, this time 
seeding it with some manual training to give the autolearner some good 
ideas to start with.

To disable bayes. see man Mail::SpamAssassin::Conf



To wipe out your bayes DB and start fresh use rm -f 
~/.spamassassin/bayes_*. Manualy train using the sa-learn tool. see man 
sa-learn