Hi all, I'm quite new to ASSP and I'm currently trying it on our corporate mailserver (Domino7.02)
I'm trying version 1.3.3.8 of ASSP, with ClamAV enabled. It seems to work quite well, it catches the viruses and A TON of spam our previous filter didn't even consider. But I'm having this very peculiar problem. If I send a *clean* .7z or .rar attachment from my mail client (tried Eudora and Thunderbird) the message passes all of the checks and gets blocked by the bayesian checks and marked as spam with probability 1.000. The strange things are: 1) I send the very same message with the very same subject and body and attachment from the webmail of that account, the messages passes as HAM with probability 0.007 or so 2) I send the very same message from other five webmail addresses I have available, it passes as HAM too, with similar low probabilities. If I disable the bayesian check for the sender that gets blocked, it passes even if I send it with eudora/thunderbird. I've tried the mail analyzer and the result is also weird. If I analyze all of the message without the attachment, it reports it's HAM with very low score. If I analyze the message WITH the attachment, it jumps to 100% probability, and *all* of the "heavy words" are attachment binary parts (lots of strange characters). I tried saving all of the test messages (with and without attachment) as .eml and putting into the /errors/notspam folder and rebuilding the database but to no avail. Also, if it can be useful, I've another test machine with 1.3.3.7 that with a very similar spamdb (built on the same .eml messages base) does *not* score the same message as SPAM , even with the attachment. It almost seems that bayes has incorrectly indexed binary parts of the attachment and won't let those go away. Is this a bug of ASSP 1.3.3.8 , or something other? By the way, I have ASSP on Debian etch 4.0r2. (this machine and the other with 1.3.3.7) Please let me know! Thank you all, Michele ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
