SA Lists schrieb:
Hello all,

I am only a home user, but I am trying to provide a spam-free environment to all members 
of my household. I have SA (3.2.2) set up with bayesian rules and run sa-learn every 
night. SA's performance is "average" (having caught c.600 out of the 1,000 or 
so spam mails currently in my spam folder (used for sa-learning).

Today I had a small rash of those spam mails that have about three lines of 
random words. SA let about 8 through and caught 2. Here are the headers from 
one of each:

You only mentioned running sa-learn on spam you should also learn your hammessages, both is important. Bayes-Performance will only be good if learned on both, ham and spam.

[Spam Samples removed]

I thought perhaps that I would increase the scores on the bayes rules but then 
I read this on the SA wiki:

Note: Scores for "learn" rules, such as BAYES_*, that rate the probability that a message is spam, are scored 
using the same method. This can produce "confusing" scores, for instance, that have BAYES_80 with a higher 
score than BAYES_99. There are a few reasons for this. 1) The score generation system does not understand that BAYES_* 
are related to one another, they're separate rules that need separate scores. 2) More importantly, the higher the 
probability from a "learn" rule, the higher likelihood that the message also hit a bunch of other rules. This 
lets the score generation system lower the "learn" rule score due to the inevitable false positive, while 
also still marking the message as spam via the sum of all rule scores.

...and now I'm not so sure that it's a good idea to change the rules' scores. I 
suppose I could reduce the threshold to 4.5; but I don't know if that's a good 
thing either.

I reduced the treshold too, but also watch quarantine regularly for FPs, it works fine for me ...


What's the best way for me to improve SA performance (bearing in mind that I'm 
really only an amateur spam fighter).

Thanks in advance....

perhaps you could use:
clamav sanesecurity
SARE Rules
Botnet plugin
too ...

AD


--
GrĂ¼sse/Greetings
MH


Dont send mail to: [EMAIL PROTECTED]
--

Reply via email to