Gerry wrote:

>>>Also, not much spam is getting autolearned:
>>>    
>>>
>>>su amavis -c 'sa-learn --dump magic'
>>>0.000          0          3          0  non-token data: bayes db version
>>>0.000          0         29          0  non-token data: nspam
>>>0.000          0       1548          0  non-token data: nham

> Thanks Gary...I do not see ALL_TRUSTED in the headers.  I ran a count on
> the amount of spam we've received in the last three days where the score 
> is above 6 (default) and there are 850 messages.  I have quarantine
> set to 12.
>  
> SA msg read: 1 (0%)38,
> SA parse: 3 (1%)39,
> SA check: 80 (30%)70,

This seems like a very short time for the SA check.

I think the mail must score at 12 or above to be learned as spam (it's
actually a little more complicated, but generally true). I find it
hard to believe that you would have this paltry amount of spam that
scores over 12. With the SA check time this low, it would lead me to
believe you may not have network tests enabled. In amavisd.conf, make
sure you have set:
$sa_local_tests_only = 0;

If you were to grep (or search) the items in your quarantine, would
you find the string SPAMCOP ? If not, then I think network tests are
not being performed.

If you have not already done so, consider installing DCC, Razor and
Pyzor.

Gary V



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to