On Sep 30, 2014, at 11:11 AM, John Hardin <jhar...@impsec.org> wrote:

> How are you training your Bayes database?
> 
> How much have you trained it? It requires a certain minimum amount of both 
> spam *and* ham before it starts evaluating messages.

I have a significantly trained DB and I get the same thing... lots of these 
"short" spams that trigger BAYES_50.  The problem is that they are sufficiently 
short that Bayes just doesn't have a lot to pick up on... there are some spammy 
tokens but very few are repeated from email to email, and a bunch of 
"indeterminate" tokens.

Most of these emails are caught by my local URI templates, although the 
spammers add new subdomains every day so it's hard to keep up.  Most of them 
are caught by my filter, though, thankfully... I only have a dozen or so per 
day that slip through with new subdomains.

Not sure if there's any way to improve the Bayes categorization for these 
emails, but I do have similar issues of BAYES_50 most of the time for these.

--- Amir

Reply via email to