On Wed, 2009-08-26 at 17:28 -0400, Dennis German wrote: > Thanks for the support.
Voluntary support. Please do keep the thread on-list, otherwise I'll stop voluntaring. I'm not the only one who can help you. > I do know enough not to past spam in a posting. And yet you did paste the payload of a scam. Hint, the SOUGHT (FRAUD) rule-set, which I feed myself, is designed to catch this sort of bare text. > I've been trying to get our local support(midphase) to > handle some of the problems they have created by moving us to > another server. Recall my question late last night ifm you got it. > > Anyway, > I haven't been manually doing training. > > Should I be doing training? > > Also did you notice error "could not find site rules directory" Yes, I did. Quite odd. Part of the reason I pointed out your setup, and wondering out aloud which user is scanning and which one you dumped the sa-learn stats for. Since you have not been training manually, these should be the same. As I have pointed out a couple times before, it is rather crucial to manually train on *low* scoring spam, e.g. exactly like this one. They are not auto-trained. > My user_prefs is always available at > http://www.real-world-systems.com/mail/user_prefs.cgi > > > Karsten Bräckelmann wrote: > > On Tue, 2009-08-25 at 21:21 -0400, Dennis German wrote: > > > sa-learn --dump magic > > > config: could not find site rules directory > > > 0.000 0 3 0 non-token data: bayes db version > > > 0.000 0 262297 0 non-token data: nspam > > > 0.000 0 24621 0 non-token data: nham > > > 0.000 0 142776 0 non-token data: ntokens > > > > Recalling some fuzzy bits about your system and setup, I wonder if that > > is the Bayes DB of the *scanning* user -- or a different one you have > > been manually training. -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
