SA Lists schrieb:
Hello all,
I am only a home user, but I am trying to provide a spam-free environment to all members
of my household. I have SA (3.2.2) set up with bayesian rules and run sa-learn every
night. SA's performance is "average" (having caught c.600 out of the 1,000 or
so spam mails currently in my spam folder (used for sa-learning).
Today I had a small rash of those spam mails that have about three lines of
random words. SA let about 8 through and caught 2. Here are the headers from
one of each:
You only mentioned running sa-learn on spam you should also learn your
hammessages, both is important. Bayes-Performance will only be good if
learned on both, ham and spam.
[Spam Samples removed]
I thought perhaps that I would increase the scores on the bayes rules but then
I read this on the SA wiki:
Note: Scores for "learn" rules, such as BAYES_*, that rate the probability that a message is spam, are scored
using the same method. This can produce "confusing" scores, for instance, that have BAYES_80 with a higher
score than BAYES_99. There are a few reasons for this. 1) The score generation system does not understand that BAYES_*
are related to one another, they're separate rules that need separate scores. 2) More importantly, the higher the
probability from a "learn" rule, the higher likelihood that the message also hit a bunch of other rules. This
lets the score generation system lower the "learn" rule score due to the inevitable false positive, while
also still marking the message as spam via the sum of all rule scores.
...and now I'm not so sure that it's a good idea to change the rules' scores. I
suppose I could reduce the threshold to 4.5; but I don't know if that's a good
thing either.
I reduced the treshold too, but also watch quarantine regularly for FPs,
it works fine for me ...
What's the best way for me to improve SA performance (bearing in mind that I'm
really only an amateur spam fighter).
Thanks in advance....
perhaps you could use:
clamav sanesecurity
SARE Rules
Botnet plugin
too ...
AD
--
GrĂ¼sse/Greetings
MH
Dont send mail to: [EMAIL PROTECTED]
--