On Tue, Apr 21, 2009 at 4:03 PM, alexus <ale...@gmail.com> wrote:
> On Tue, Apr 21, 2009 at 3:58 PM, Gene Heskett <gene.hesk...@verizon.net>
> wrote:
>> On Tuesday 21 April 2009, alexus wrote:
>>>On Tue, Apr 21, 2009 at 1:21 AM, Gene Heskett <gene.hesk...@verizon.net>
>> wrote:
>>>> On Monday 20 April 2009, alexus wrote:
>>>>>i'm trying to teach my SA whats spam
>>>>>
>>>>>it's a brand new out of box SA, i have few domains that i dont get
>>>>>anything but a spam and on the top seems like from same spamers as
>>>>>they "picked" emails that they thought would be good to spam and keep
>>>>>on spaming them
>>>>>
>>>>>so i do sa-learn --spam *
>>>>>after a while it saying something like
>>>>>
>>>>>Learned tokens from 52 message(s) (52 message(s) examined)
>>>>>
>>>>>yet, when more of some what same email comes in it still can't
>>>>>determinate if its spam or not...
>>>>>
>>>>>am i doing something wrong? or is sa-learn isn't suppose to work as i
>>>>>thought it would..
>>>>
>>>> You need to have it learn at least 200 messages of both 'ham' and 'spam'
>>>> before it has enough data to switch to working mode. So sort them into
>>>> separate directories, and have it learn both a clean inbox as ham, and an
>>>> all spam directory. When it has learned those, it keep track and will not
>>>> learn those particular emails again, so clean the spam box, just delete
>>>> its contents. I even use a cleaned up, sorted to separate directories
>>>> mailing list as ham just so it knows stuff from that list is generally
>>>> ham. I had one list that I never figured out what was spammy about it,
>>>> and since the corpus of that list went back several years, I fed the whole
>>>> thing to SA as ham. Took it several hours but no more problems with that
>>>> lists messages now. Now, the spam that does get through goes into a spam
>>>> dir, and a cron job learns it, then deletes it daily. I'm lazy, and
>>>> repetitive tasks are to be done by a cron fired script around this camp.
>>>> :)
>>>>
>>>> --
>>>> Cheers, Gene
>>>> "There are four boxes to be used in defense of liberty:
>>>> soap, ballot, jury, and ammo. Please use in that order."
>>>> -Ed Howdershelt (Author)
>>>> Any two philosophers can tell each other all they know in two hours.
>>>> -- Oliver Wendell Holmes, Jr.
>>>
>>>how do I change my SA from learning mode to working mode?
>>
>> I believe that is automatic once it has enough data. See above, 200 msgs of
>> each type required IIRC.
>>
>> Understand that SA only rates the email, and puts its findings in the header.
>> It is up to you to determine what is done with mail that is too spammy. I
>> use
>> procmail as the MTA from fetchmail, and procmail is configured to send
>> anything that SA labels with 5 stars or over to /dev/null.
>>
>> --
>> Cheers, Gene
>> "There are four boxes to be used in defense of liberty:
>> soap, ballot, jury, and ammo. Please use in that order."
>> -Ed Howdershelt (Author)
>> Delta: The kids will love our inflatable slides. -- David Letterman
>>
>>
>
> an example
>
> Received: by simscan 1.4.0 ppid: 97779, pid: 97780, t: 3.8809s
> scanners: regex: 1.4.0 clamav: 0.95/m:50/d:9252 spam: 3.2.5
> X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx1.alexus.biz
> X-Spam-Level: ****
> X-Spam-Status: No, score=4.9 required=5.0 tests=BAYES_99,HTML_MESSAGE,
> MIME_HTML_ONLY,SPF_HELO_PASS autolearn=no version=3.2.5
>
> it gave BAYES_99, yet it still think it's autolearn=no, and it still
> doesnt think this is SPAM
>
> --
> http://alexus.org/
>
this is from another email
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx1.alexus.biz
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.6 required=5.0 tests=BAYES_99,HTML_MESSAGE,
MIME_HTML_ONLY,SPF_HELO_PASS,SPF_SOFTFAIL autolearn=no version=3.2.5
X-Spam-Report:
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* -0.0 SPF_HELO_PASS SPF: HELO matches SPF record
* 0.6 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
how can I put X-Spam-Report into every email? because this was
generated manually via "spamassassin -t email"
--
http://alexus.org/
