At 01:22 PM 1/30/2004, Spyros Tsiolis wrote:

1. spamassassin ! Plain sa installation . What next ? Training ?
    1000 Spam and 1000 Ham ??


Bayes training is a good thing. Ideal is to have a spam/ham training ratio close to what comes into your server in reality. However, considerable variance isn't a problem, as long as it's not wildly wrong..

1000/1000 is a good starting point for bayes training. Just keep try to keep things as close to reality as possible without excessive effort.


2. spamassassin and sa_filter.pl. Invoking spamd instead of
spamassassin.
   Can someone still train spamassassin ? From what Don told me
you don't  But I need this clarified. Could someone answer this ?

I'm not familiar with sa_filter.pl, but people using the spamd/spamc combo CAN train bayes.. you just need to make sure you pass a -u parameter that is a user you can su to before training.


The reason you need to -u is that spamd will fall back to nobody if both it and spamc are called as root. Bayes training normally goes in the user's home dir, but in the case of the user nobody, some systems have /dev/null type homedirs.



3. Say you _DON'T_ train spamassassin and you leave it running
with "spamd"
    and Dons' options. Can someone at least enroll any relevant
mail (ham)
    that is being treated as spam in the whitelist, so they
don't get
thrown?

I'm not familiar with don's options, so I can't follow the thread here :)



4. This is one of the most serious questions that's been bugging
me for the
last weeks.
    We have Xmail running and people get their ham and spam. Can
someone
    define a simple way of actually grabbing hold of spam and
putting it
onto,say , a
    spam mail account, so then I (the admin) can go and start
feeding the
beast
    (that'd be spamassassin) in order for it live and learn ?

This is actually partly mentioned in SA the FAQ... http://wiki.spamassassin.org


In short, forwarding generally doesn't work.. to feed bayes you need a more-or-less _exact_ copy of the message, complete with original, mostly unaltered headers. Some have suggested using bounce/redirect features of some mailclients, others have suggested having user's send them as attachments and stripping them..

If you can set up system that gets you a clean message, you're golden.. Personally, I don't know of anyone doing it, but it is at least theoretically possible.

I don't bother with user-feedback training myself.. it's too much work to make it go.

Instead I have a spamtrap, and a nonspamtrap that I use for training.

I subscribe the nonspamtrap address to some popular legit newsletters my users get. cnn news updates, industry newsletters, etc.. I monitor it for spam, and I never mention it's address anywhere to prevent it from being picked up.

The spamtrap is a collection addresses that I've seeded in example postings to mailing lists that winds up with good clean spam. I might make a post discussing a technical and unrelated issue, and use a made up email address like [EMAIL PROTECTED] as a part of the example. Believe it or not, I'm going to start getting bounces for that address in a week or two. After I'm sure it's all spam (and some undisclosed time has gone by), I'll funnel it into the spamtrap.

I feed both mailboxes to sa-learn daily, along with carefully transferred selections from my own mailbox. (since I'm transferring by hand, this is easier than trying to make a "userproof" automated system)




Two reasons I posted this on the xmail list and not on the sa
list :

a. I use sa with Xmail (good enough for me :-)
b. The sa list never gets a message I send. Same happens here
but sometimes.

Well SA list got your post this time, the sf.net servers are being _really_ slow this week due to the mydoom worm and other things clogging up the mailservers.




-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to