On Tuesday 31 May 2005 05:16, Loren Wilton wrote: > > 1. At our site we get approx. 1000 spam a week. Most of it is rated below > > 2.0 > > > points and gets through (even if we set required hits to 3 and 2 for > > certain > > > mailboxes). > > I assume you mean here that you have 1000 spam a week leaking through? Or > do you mean that you have 1000 spam a week TOTAL and ALL of it gets > through? > > Setting the required hits below 5, or certainly below 4, is not the answer. > You have something else wrong, I would say severely wrong. You have Bayes > turned on, and it should be taking care of the vast majority of this sort > of thing, if it is properly trained. > > If Bayes is improperly trained, it could be causing your problem, by > claiming that some class (or possibly all) of your spam is really ham, and > lowering the score. > > That is about the limit of the help we can give from what you posted. If > you posted a typical spam *with complete headers* and *with the scores you > got* we would be able to look at it and probably spot some obvious > problems. As it is, all we can do is guess. > > Loren
Sorry for my late reply - my evening is your morning. There is 1000 spam a week that leaks through and perhaps another 500-600 that get filtered by spamassassin. If my Bayes is poorly trained what options do I have. Here is a typical letter that gets through. =================================================================================== Return-Path: <[EMAIL PROTECTED]> Received: from fw.doverie.bg (doh-gw.customer.0rbitel.net [195.24.44.114]) by mail1.mr-bricolage.bg (8.13.3/8.13.3/Debian-6) with SMTP id j4V11DGj014435 for <[EMAIL PROTECTED]>; Tue, 31 May 2005 04:01:15 +0300 Received: (qmail 13680 invoked by uid 507); 31 May 2005 00:58:54 -0000 Delivered-To: [EMAIL PROTECTED] Received: (qmail 13672 invoked by uid 503); 31 May 2005 00:58:48 -0000 Received: from [EMAIL PROTECTED] by fw.doverie.bg by uid 500 with qmail-scanner-1.15 (f-prot: 3.12. Clear:. Processed in 12.821956 secs); 31 May 2005 00:58:48 -0000 Received: from cow100.orbitel.bg (HELO ns.orbitel.bg) (195.24.32.18) by 0 with SMTP; 31 May 2005 00:58:20 -0000 Received: (qmail 607 invoked from network); 31 May 2005 01:01:36 -0000 Received: from unknown (HELO street67.net) (219.134.152.97) by ns.orbitel.bg with SMTP; 31 May 2005 01:01:36 -0000 Message-ID: <[EMAIL PROTECTED]> Date: Mon, 30 May 2005 16:15:11 +1100 From: "michael torrey" <[EMAIL PROTECTED]> User-Agent: QUALCOMM Windows Eudora Version 6.0.0.22 X-Accept-Language: en-us MIME-Version: 1.0 To: "Elden Irving" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> Subject: It is all about quality tableets sold at the finest prices. Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on mail1.mr-bricolage.bg X-Spam-Level: X-Spam-Status: No, score=0.1 required=2.0 tests=FORGED_RCVD_HELO autolearn=ham version=3.0.2 Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: At our rxdrug-site, you can choose top-selling rxmeds at a reduced prices. Legitimate way to e-shoppe for tableets. We provide customers flexible and reliable distribution services. ====================================================================== Regards Chavdar Videff
