On Thu, 8 Sep 2011 16:59:15 -0700 (PDT), Steve Fatula wrote:
> I used DSPAM many years ago, and, have gone back to it again. I am
> using dovecot-antispam (well, version 2 for dovecot 2) to do the
> re-training. Thus far, I have learned 59 spam, most of which are very
> similar in nature. My recollection was that DSPAM learned very
> quickly, but this is not happening. Perhaps my memory is bad!
>
> My antispam config looks like this:
>
> plugin {
> autocreate = Spam
> autosubscribe = Spam
> antispam_signature_missing = move
> antispam_backend = DSPAM
> antispam_signature = X-DSPAM-Signature
> antispam_trash_pattern_ignorecase = trash;Deleted *
> antispam_spam = Spam
> antispam_dspam_binary = /usr/bin/dspam
> antispam_dspam_args = --source=error;--signature=%%s
> }
>
> My question is this - in the dspam logs, I see (for example) this:
>
> 1315501817M<None Specified>11,4e68f61b138342073587969<None
> Specified>Retrained
>
>
> Not sure what those nones are. When re-training, does DSPAM really
> just use the signature, or does it need the entire message? Should my
> configuration of antispam actually be working?
>
Quoting myself
http://wiki.linuxwall.info/doku.php/en:ressources:dossiers:dspam
Read "8 Test Procedure"
DSPAM will store tokens when a message passes through it. When you
retrain a message, DSPAM will find all the tokens associated with the
signature, and update their statistics.
> The numbers in dspam_stats DO work, lining up with the log file,
> i.e., after moving to the spam folder, I see false negatives rise by
> 1. My question is more how can I tell if the actual data is being
> changed such that it is in fact learning what spam is? Or, am I just
> too impatient?
>
Follow the test procedure, and do the retrain manually, so you can
check if it's working probably. (hint: it is.)
Cheers,
Julien
------------------------------------------------------------------------------
Why Cloud-Based Security and Archiving Make Sense
Osterman Research conducted this study that outlines how and why cloud
computing security and archiving is rapidly being adopted across the IT
space for its ease of implementation, lower cost, and increased
reliability. Learn more. http://www.accelacomm.com/jaw/sfnl/114/51425301/
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user
