On Mon, 1 Jun 2009, Rich Shepard wrote:
On Mon, 1 Jun 2009, John Hardin wrote:
Have you kept your spam and ham corpa?
I'm not sure. The spam comes from the spam-uncaught file which is
cleared each time it's run.
Pity. If you're manually training it's a very good idea to retain your
corpa so you can review training and retrain from scratch if needed.
Okay, let's key on that one.
> ## Call SpamAssassin
> : 0fw: spamassassin.lock
> * < 256000
> | spamassassin
: 0 fw: spamassassin.lock
* < 256000
* ! ^TO_abuse@
* ! ^List-Id: .*<?use...@.]spamassassin\.apache\.org>?
* ! ^Received: from salmo\.appl-ecosys\.com \(localhost\.localdomain
\[127\.0\.0\.1\]) by salmo\.appl-ecosys\.com
| /usr/bin/spamc
Using spamc creates less load than launching spamassassin from scratch
for every email, but you do have to manage the daemon (i.e. restart it
if the rules change).
I run spamd:
2978 ? Ss 12:16 /usr/bin/spamd -d --pidfile=/var/run/spamd.pid
3052 ? S 0:04 spamd child
3054 ? S 0:05 spamd child
is this not adequate for a light load?
That's fine. If you're currently running spamd, then having procmail call
spamassassin is wasteful. That recompiles all of the rules from scratch
for every message you receive, where using spamc/spamd compiles the rules
once when you restart the daemon.
Are your resources really so limited that you want to serialize all
email delivery? As a middle ground you might consider per-user
lockfiles instead, e.g.:
: 0 fw: $HOME/.spamassassin.lock
I'd also suggest upping the size limit a bit, but that's not a big issue.
There are more complex things you can do; you might want to take a
look at http://www.impsec.org/~jhardin/antispam/spamassassin.procmail
There are only two users on this network and a low mail volume for each
of us.
Ok, then your locking should work okay.
I'll keep teaching SA that the log reports are ham and see if that makes
a difference.
It will help, though it may take a while to override their current
learning as spam.
As I wrote earlier, this is all within the past quarter year,
and it's been a PITA since it's taken time and attention away from my
business.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...to announce there must be no criticism of the President or to
stand by the President right or wrong is not only unpatriotic and
servile, but is morally treasonous to the American public.
-- Theodore Roosevelt, 1918
-----------------------------------------------------------------------
5 days until the 65th anniversary of D-Day
