So far, here's an update. The OS is Suse Pro 9.3 I haven't seen any spam messages with ALL_TRUSTED in the headers. I have seen empty emails with a spam score of zero though and spamd tries to autolearn those as ham and shows "failed".
The bayes_file_mode is now set to 0777 I'm still getting about 50/50 on the spam caught and spam missed. I don't use -L for sa-learn. I was able to confirm in the /etc/sysconfig/spamd file that spamd is using -d -c -L so I removed the -L and restarted the daemon. Hope that helps. Not sure what to think about the --allow-tell option; I didn't find that anywhere in the spamd files, but I haven't looked too hard yet. I've also moved the bayes files into a folder names bayesfiles and adjusted the path in the local.cf file as follows: bayes_path /etc/mail/spamassassin/bayesfiles/bayes mail:/etc/mail/spamassassin/bayesfiles # ls -lah total 12M drwxrwxrwx 2 root root 232 Feb 7 20:34 . drw-rw-rw- 3 root root 224 Feb 7 20:08 .. -rwxrwxrwx 1 root users 1.3M Feb 7 20:34 bayes_seen -rwxrwxrwx 1 root users 5.1M Feb 7 20:34 bayes_toks -rwxrwxrwx 1 root root 2.4M Feb 7 20:11 bayes_toks.expire24534 -rwxrwxrwx 1 root root 5.3M Feb 4 17:38 bayes_toks.expire8083 -rwxrwxrwx 1 root root 1.4M Feb 6 10:43 bayes_toks.expire866 I'm not yet sure which account spamd/spamassassin runs under when the system starts up, but I run sa-learn as root. (that changes the group to root on the bayes_toks file.) How do I look to see which account is set to run spamd upon system startup? (i'm still rather new, but learning as I go by asking.) Thanks for everyone's help. Hopefully the network tests will now help increase the score on spam. But I still need assistance on figuring out the autolearn problem with "failed". -Brian
