Salvatore Toribio wrote:
Hi,
Need your helps guys with spamassassin. it's given 99% negative
score now, -4.5/5.0, -4.9/5.0, etc. Somehow i think spamassassin is
confused. I added few whitelist_from in the local.cf file and also
tested content. But my test below resulted with 2.1 core instead of
7.0. I am confused why the scores by spamassassin are mostly
negative points. How can I reset the whitelist or the score so that
it will reflect the right score? Thanks!!!!
# Block Body Content
body MY_BLOCK_01 / nude /i
describe MY_BLOCK_01 Block email with this word.
score MY_BLOCK_01 7.0
Maybe your bayes database has learnt a lot of messages in a wrong way,
and most of messages are catched by the rule
BAYES_00 BODY: Bayesian spam probability is 0 to 1%
That gives a score of -4.9
The problem is that your database will learn more wrong 'ham mails'
since the score is almost always negative. Maybe you might delete the
bayes database and start again...
I've reduced this score in local.cf:
score BAYES_00 0 0 -2.901 -2.900
And also:
bayes_auto_learn_threshold_nonspam -1.5
You could also try to install
<http://xoomer.virgilio.it/j.toribio/qmail-scanner/> and enable sa_alt
and sa_debug, then you can have a debug of the scores like this:
14/01/2004 09:18:47:11056: +++ starting debugging for process 11056 by
uid=81
14/01/2004 09:18:47:11056: The server is in the WhiteList
14/01/2004 09:18:47:11056: w_c: elapsed time from start 0.024431 secs
14/01/2004 09:18:47:11056: return-path='xxxx', recips='[EMAIL PROTECTED]'
14/01/2004 09:18:47:11056: from='Buongiorno! <xxxx>', subj='JENNA E' ...
14/01/2004 09:18:47:11056: p_s: finished scan in 0.02513 secs
14/01/2004 09:18:47:11056: sophie: finished scan in 0.098389 secs
14/01/2004 09:18:47:11056: SA: REPORT hits = 8.7/6.5
0.1 HTML_70_80 BODY: Message is 70% to 80% HTML
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
0.6 HTML_FONT_INVISIBLE BODY: HTML font color is same as background
0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue
0.1 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_FONT_BIG BODY: HTML has a big font
0.7 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
14/01/2004 09:18:47:11056: SA: yup, this smells like SPAM - quarantine
message...
14/01/2004 09:18:47:11056: SA: required_hits=6.5 sa_quarantine=8.3
sa_delete=11
14/01/2004 09:18:47:11056: SA: finished scan in 8.52525 secs - hits=8.7
14/01/2004 09:18:47:11056: ini_sc: finished scan of...
14/01/2004 09:18:47:11056: ini_sc: elapsed time from start 8.812607 secs
14/01/2004 09:18:47:11056: v_v_t_r: Description contain "spam" - so
don't notify the sender
14/01/2004 09:18:56:11056: ------ Process 11056 finished. Total of
8.863886 secs
Regards
Salvatore
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
Salvatore, thanks again for your help. Is this the right syntax in
local.cf? Thanks.
BAYES_00 BODY: Bayesian spam probability is 0 to 1%
score BAYES_00 0 0 -2.901 -2.900
bayes_auto_learn_threshold_nonspam -1.5
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
