Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 8/31/2014 5:11 PM, LuKreme wrote: On 31 Aug 2014, at 08:08 , Ted Mittelstaedtt...@ipinc.net wrote: Google does it. It's not impossible. [snip] My experience is that the commercial providers like Gmail are now so aggressive that false positives are VERY common on their systems, this

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 8/31/2014 4:46 PM, Bob Proulx wrote: Ted Mittelstaedt wrote: Reindl Harald wrote: i think it's impossible to improve that much out-of-the-box because that would make it to sensitive while the bayes has the ham side of your communication too for decisions Google does it. It's not

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 8/31/2014 7:55 AM, Axb wrote: On 08/31/2014 04:08 PM, Ted Mittelstaedt wrote: Out of the box the default decision point of 5 is too high anyway. SA is the framework - you can tune to your need as much as you want. I think the emphasis on avoiding false positives in the stock

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 02.09.2014 um 09:57 schrieb Ted Mittelstaedt: On 8/31/2014 5:11 PM, LuKreme wrote: On 31 Aug 2014, at 08:08 , Ted Mittelstaedtt...@ipinc.net wrote: Google does it. It's not impossible. [snip] My experience is that the commercial providers like Gmail are now so aggressive that false

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 8/31/2014 7:35 AM, Reindl Harald wrote: Am 31.08.2014 um 16:08 schrieb Ted Mittelstaedt: On 8/31/2014 2:21 AM, Reindl Harald wrote: Am 31.08.2014 um 02:15 schrieb Ted Mittelstaedt: Yes, it does work great when you have the bayes filter turned on and you take the time to feed it. And

Re: SA works great!

2014-09-02 Thread Axb
On 09/02/2014 11:06 AM, Ted Mittelstaedt wrote: masscheck runs against your spam and ham. But, masscheck does not know if what your feeding it is actually ham or spam until you have gone through your corpora and sorted it - moved the spam to the spam folder and the ham to the ham folder

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 9/2/2014 2:16 AM, Reindl Harald wrote: Am 02.09.2014 um 09:57 schrieb Ted Mittelstaedt: On 8/31/2014 5:11 PM, LuKreme wrote: On 31 Aug 2014, at 08:08 , Ted Mittelstaedtt...@ipinc.net wrote: Google does it. It's not impossible. [snip] My experience is that the commercial

Re: SA works great!

2014-09-02 Thread Axb
On 09/02/2014 12:37 PM, Ted Mittelstaedt wrote: I'm just saying that out of box it should catch more spam and assume people will tolerate a few FPs. Because that is what I am seeing people demand in the real world. This insistence that if SA is responsible for even ONE FP it's a disaster is a

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 02.09.2014 um 12:15 schrieb Ted Mittelstaedt: On 8/31/2014 7:35 AM, Reindl Harald wrote: Am 31.08.2014 um 16:08 schrieb Ted Mittelstaedt: On 8/31/2014 2:21 AM, Reindl Harald wrote: Am 31.08.2014 um 02:15 schrieb Ted Mittelstaedt: Yes, it does work great when you have the bayes

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 9/2/2014 3:48 AM, Axb wrote: On 09/02/2014 12:37 PM, Ted Mittelstaedt wrote: I'm just saying that out of box it should catch more spam and assume people will tolerate a few FPs. Because that is what I am seeing people demand in the real world. This insistence that if SA is responsible for

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 02.09.2014 um 12:37 schrieb Ted Mittelstaedt: On 9/2/2014 2:16 AM, Reindl Harald wrote: and here you prove again that it don't work really out-of-the-box because if i have to look all day long in my spam folder because a noticeable part of my legit mail lands there it *do not work* Are

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 9/2/2014 3:54 AM, Reindl Harald wrote: Am 02.09.2014 um 12:37 schrieb Ted Mittelstaedt: On 9/2/2014 2:16 AM, Reindl Harald wrote: and here you prove again that it don't work really out-of-the-box because if i have to look all day long in my spam folder because a noticeable part of my

Re: SA works great!

2014-09-02 Thread Kai Schaetzl
Ted Mittelstaedt wrote on Sun, 31 Aug 2014 07:08:11 -0700: Out of the box the default decision point of 5 is too high anyway. No. You can always lower it yourself. With the result of more FPs. If you or your users can live with that. Fine. Many can't. I think the emphasis on avoiding false

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 9/2/2014 3:48 AM, Reindl Harald wrote: Am 02.09.2014 um 12:15 schrieb Ted Mittelstaedt: On 8/31/2014 7:35 AM, Reindl Harald wrote: Am 31.08.2014 um 16:08 schrieb Ted Mittelstaedt: On 8/31/2014 2:21 AM, Reindl Harald wrote: Am 31.08.2014 um 02:15 schrieb Ted Mittelstaedt: Yes, it

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 02.09.2014 um 13:43 schrieb Ted Mittelstaedt: as explained above: * the users don't want to see clear spam at all * in many countries *you must* reject before-queue * frankly, where i live for drop a accepted messages you can go up to 2 years *in jail* This is really getting silly

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 02.09.2014 um 13:54 schrieb Reindl Harald: Am 02.09.2014 um 13:43 schrieb Ted Mittelstaedt: as explained above: * the users don't want to see clear spam at all * in many countries *you must* reject before-queue * frankly, where i live for drop a accepted messages you can go up to

RE: Pyzor errors after upgrade

2014-09-02 Thread David Jones
From: Chris cpoll...@embarqmail.com Sent: Monday, September 01, 2014 10:25 PM To: users@spamassassin.apache.org Subject: Pyzor errors after upgrade System is Ubuntu 14.04 LTS I use fetchmail linked with procmail. Once mail is tossed to my other

Re: Pyzor errors after upgrade

2014-09-02 Thread Chris
On Mon, 2014-09-01 at 21:17 -0700, John Hardin wrote: On Mon, 1 Sep 2014, Chris wrote: System is Ubuntu 14.04 LTS I use fetchmail linked with procmail. Permissions on the ~/.pyzor/servers files and directory is: drwxr-x--- 2 chris chris 4096 Jul 17 09:28 .pyzor -rw-r- 1

Re: Pyzor errors after upgrade

2014-09-02 Thread John Hardin
On Tue, 2 Sep 2014, Chris wrote: On Mon, 2014-09-01 at 21:17 -0700, John Hardin wrote: On Mon, 1 Sep 2014, Chris wrote: System is Ubuntu 14.04 LTS I use fetchmail linked with procmail. Permissions on the ~/.pyzor/servers files and directory is: drwxr-x--- 2 chris chris 4096 Jul 17

Re: Pyzor errors after upgrade

2014-09-02 Thread Chris
On Tue, 2014-09-02 at 07:20 -0700, John Hardin wrote: On Tue, 2 Sep 2014, Chris wrote: On Mon, 2014-09-01 at 21:17 -0700, John Hardin wrote: On Mon, 1 Sep 2014, Chris wrote: System is Ubuntu 14.04 LTS I use fetchmail linked with procmail. Permissions on the ~/.pyzor/servers files

Re: Pyzor errors after upgrade

2014-09-02 Thread Chris
On Tue, 2014-09-02 at 07:20 -0700, John Hardin wrote: On Tue, 2 Sep 2014, Chris wrote: On Mon, 2014-09-01 at 21:17 -0700, John Hardin wrote: On Mon, 1 Sep 2014, Chris wrote: System is Ubuntu 14.04 LTS I use fetchmail linked with procmail. Permissions on the ~/.pyzor/servers files

Re: Pyzor errors after upgrade

2014-09-02 Thread John Hardin
On Tue, 2 Sep 2014, Chris wrote: On Tue, 2014-09-02 at 07:20 -0700, John Hardin wrote: On Tue, 2 Sep 2014, Chris wrote: On Mon, 2014-09-01 at 21:17 -0700, John Hardin wrote: On Mon, 1 Sep 2014, Chris wrote: System is Ubuntu 14.04 LTS I use fetchmail linked with procmail. Permissions on

Re: Pyzor errors after upgrade

2014-09-02 Thread Chris
On Tue, 2014-09-02 at 10:30 -0700, John Hardin wrote: On Tue, 2 Sep 2014, Chris wrote: On Tue, 2014-09-02 at 07:20 -0700, John Hardin wrote: On Tue, 2 Sep 2014, Chris wrote: On Mon, 2014-09-01 at 21:17 -0700, John Hardin wrote: On Mon, 1 Sep 2014, Chris wrote: System is Ubuntu

Re: Pyzor errors after upgrade

2014-09-02 Thread John Hardin
On Tue, 2 Sep 2014, Chris wrote: ifplugin Mail::SpamAssassin::Plugin::Pyzor pyzor_path /usr/local/bin/pyzor pyzor_options --homedir /home/chris/.pyzor endif Would it be better if I changed the pyzor home dir to /etc/mail/spamassassin and put the 'servers' file there? In general that's a

Re: SA works great!

2014-09-02 Thread LuKreme
On 02 Sep 2014, at 01:57 , Ted Mittelstaedt t...@ipinc.net wrote: On 8/31/2014 5:11 PM, LuKreme wrote: On 31 Aug 2014, at 08:08 , Ted Mittelstaedtt...@ipinc.net wrote: Google does it. It's not impossible. [snip] My experience is that the commercial providers like Gmail are now so

Re: Pyzor errors after upgrade

2014-09-02 Thread Chris
On Tue, 2014-09-02 at 11:27 -0700, John Hardin wrote: On Tue, 2 Sep 2014, Chris wrote: ifplugin Mail::SpamAssassin::Plugin::Pyzor pyzor_path /usr/local/bin/pyzor pyzor_options --homedir /home/chris/.pyzor endif Would it be better if I changed the pyzor home dir to

Re: SA works great!

2014-09-02 Thread Bob Proulx
Ted Mittelstaedt wrote: Bob Proulx wrote: Plus Google can undeliver a message from your Inbox if you have not read it yet. Say a spammer slowly sends sneaky spam to 10,000 people. After the first dozen report the message as spam then the next 9988 have the message undelivered from their

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 02.09.2014 um 22:24 schrieb Bob Proulx: Ted Mittelstaedt wrote: Bob Proulx wrote: Plus Google can undeliver a message from your Inbox if you have not read it yet. Say a spammer slowly sends sneaky spam to 10,000 people. After the first dozen report the message as spam then the next 9988

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 9/2/2014 4:59 AM, Reindl Harald wrote: Am 02.09.2014 um 13:54 schrieb Reindl Harald: Am 02.09.2014 um 13:43 schrieb Ted Mittelstaedt: as explained above: * the users don't want to see clear spam at all * in many countries *you must* reject before-queue * frankly, where i live for drop

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 9/2/2014 12:19 PM, LuKreme wrote: On 02 Sep 2014, at 01:57 , Ted Mittelstaedtt...@ipinc.net wrote: On 8/31/2014 5:11 PM, LuKreme wrote: On 31 Aug 2014, at 08:08 , Ted Mittelstaedtt...@ipinc.net wrote: Google does it. It's not impossible. [snip] My experience is that the commercial

Re: SA works great!

2014-09-02 Thread David F. Skoll
On Tue, 02 Sep 2014 13:32:26 -0700 Ted Mittelstaedt t...@ipinc.net wrote: The point of blocking on DNS or IP based blocking is to issue that error 5xx because that is the ONLY thing that is going to cause the spammer to delist. You are an optimist, aren't you? Because at that point they are

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 02.09.2014 um 22:32 schrieb Ted Mittelstaedt: On 9/2/2014 4:59 AM, Reindl Harald wrote: just get a proper MTA, enable debug logging and watch the commands / responses between client and server due a message transmission and to make it clear for you: until after end of data itslef is

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 02.09.2014 um 22:40 schrieb Ted Mittelstaedt: Yes, that is my experience when I setup test addresses on Gmail and stick them into spammer unsubscribe links. Lots of spam starts showing up and over 90% in the junk folder Bruhaha and that is working out of the box? your problem is that you

Re: SA works great!

2014-09-02 Thread Ted Mittelstaedt
On 9/2/2014 1:45 PM, David F. Skoll wrote: On Tue, 02 Sep 2014 13:32:26 -0700 Ted Mittelstaedtt...@ipinc.net wrote: The point of blocking on DNS or IP based blocking is to issue that error 5xx because that is the ONLY thing that is going to cause the spammer to delist. You are an

Re: SA works great!

2014-09-02 Thread Bob Proulx
Reindl Harald wrote: schrieb Bob Proulx: Ted Mittelstaedt wrote: Bob Proulx wrote: Plus Google can undeliver a message from your Inbox if you have not read it yet. Say a spammer slowly sends sneaky spam to 10,000 people. After the first dozen report the message as spam then the next

Re: SA works great!

2014-09-02 Thread Reindl Harald
Am 03.09.2014 um 00:39 schrieb Bob Proulx: Reindl Harald wrote: schrieb Bob Proulx: Ted Mittelstaedt wrote: Bob Proulx wrote: Plus Google can undeliver a message from your Inbox if you have not read it yet. Say a spammer slowly sends sneaky spam to 10,000 people. After the first dozen

bayes_token is marked as crashed

2014-09-02 Thread LuKreme
I am getting the following error repeated many times a second: /usr/local/libexec/mysqld: Table './bayes/bayes_token' is marked as crashed and should be repaired -- My parents were unwilling to secure the necessary eagle's eggs and lion semen

Re: bayes_token is marked as crashed

2014-09-02 Thread Reindl Harald
Am 03.09.2014 um 01:07 schrieb LuKreme: I am getting the following error repeated many times a second: /usr/local/libexec/mysqld: Table './bayes/bayes_token' is marked as crashed and should be repaired well, repair table bayes_token in MySQL or use the following option in /etc/my.cnf to

Re: bayes_token is marked as crashed

2014-09-02 Thread Kevin A. McGrail
On 9/2/2014 7:07 PM, LuKreme wrote: I am getting the following error repeated many times a second: /usr/local/libexec/mysqld: Table './bayes/bayes_token' is marked as crashed and should be repaired Shutdown spamassassin, shutdown mysql and look into myisamchk is my best recommendation.

Re: bayes_token is marked as crashed

2014-09-02 Thread LuKreme
On 02 Sep 2014, at 17:16 , Reindl Harald h.rei...@thelounge.net wrote: Am 03.09.2014 um 01:07 schrieb LuKreme: I am getting the following error repeated many times a second: /usr/local/libexec/mysqld: Table './bayes/bayes_token' is marked as crashed and should be repaired well, repair

Bayes autolearn questions

2014-09-02 Thread Alex
Hi, I have a spamassassin-3.4 system with the following bayes config: required_hits 5.0 rbl_timeout 8 use_bayes 1 bayes_auto_learn 1 bayes_auto_learn_on_error 1 bayes_auto_learn_threshold_spam 9.0 bayes_expiry_max_db_size 950 bayes_auto_expire 0 However, spam with scores greater than 9.0

Re: Bayes autolearn questions

2014-09-02 Thread Karsten Bräckelmann
On Tue, 2014-09-02 at 21:11 -0400, Alex wrote: I have a spamassassin-3.4 system with the following bayes config: required_hits 5.0 rbl_timeout 8 use_bayes 1 bayes_auto_learn 1 bayes_auto_learn_on_error 1 bayes_auto_learn_threshold_spam 9.0 bayes_expiry_max_db_size 950

Re: Bayes autolearn questions

2014-09-02 Thread LuKreme
On 02 Sep 2014, at 19:11 , Alex mysqlstud...@gmail.com wrote: However, spam with scores greater than 9.0 aren't being autolearned: I believe the score threshold is the base score WITHOUT bayes. Try running the email through with a -D flag and see what you get. (And that is only a partial

Re: Bayes autolearn questions

2014-09-02 Thread Karsten Bräckelmann
On Tue, 2014-09-02 at 20:22 -0600, LuKreme wrote: On 02 Sep 2014, at 19:11 , Alex mysqlstud...@gmail.com wrote: However, spam with scores greater than 9.0 aren't being autolearned: I believe the score threshold is the base score WITHOUT bayes. Try running the email through with a -D

Re: Bayes autolearn questions

2014-09-02 Thread LuKreme
On 02 Sep 2014, at 20:50 , Karsten Bräckelmann guent...@rudersport.de wrote: On Tue, 2014-09-02 at 20:22 -0600, LuKreme wrote: On 02 Sep 2014, at 19:11 , Alex mysqlstud...@gmail.com wrote: However, spam with scores greater than 9.0 aren't being autolearned: I believe the score threshold

Re: A rule for Phil

2014-09-02 Thread Karsten Bräckelmann
On Mon, 2014-09-01 at 07:36 +0200, Luciano Rinetti wrote: I need a rule that, when a message is sento to p...@example.com and the Subject contains CV or Curriculum, scores the message with -9 Scoring the message with $number is impossible and not how SA works. Triggering a rule with a negative

Re: Bayes autolearn questions

2014-09-02 Thread Karsten Bräckelmann
On Tue, 2014-09-02 at 21:16 -0600, LuKreme wrote: On 02 Sep 2014, at 20:50 , Karsten Bräckelmann guent...@rudersport.de wrote: On Tue, 2014-09-02 at 20:22 -0600, LuKreme wrote: I believe the score threshold is the base score WITHOUT bayes. Try running the email through with a -D flag

Re: SA works great!

2014-09-02 Thread Bob Proulx
Reindl Harald wrote: schrieb Bob Proulx: Being able to undeliver spam after it has been detected later and if it is as yet unread is none of those bad things. This is a positive anti-spam feature in the core feature set of an email provider. honestly i would not want to get a message