Mike Fedyk wrote:
Tim B wrote:
I'm sure this idea has been knocked around before, but with the way MyDoom, Bagle (beagle), and NeySky have gone through so many versions with minor variations of their email message, has anyone thougth about adding bayes style checking?
It wouldn't be a definate positive, but instead a this is probably a variant of type check?
Actually, a bayes style spam filter should do exactly what you want.
Well the idea was to get the weight of processing off the spamfilter. If it's virus infected I didn't want Spamassassin to also have to process it since my spamassassin install takes up a LOT more resources then clamscan does. It should really be take care of it at the virus-scan level, and the Bayes database I would hope would be part of the virus def updates.
I'm using spamassassin now. It is a complete hog and the heaviest process on my mail server. Only Mozilla can beat it, and that's running on the app server...
I've been thinking of setting up a two tier bayes system for my users.
Have a global (wait! hear me out...) bayes database used by all users, and a user specific bayes database also.
When you train the per user bayes database, you're also training the global bayes database.
The global database would have 50% or 75% of the scoring or something like that.
Has this already been done?
Mike
You'd probably have to mix and match Antispam filters. Say Spamassassin for global and bogofilter or dspam for per-user. the catch would be having to teach both bayes databases.
The bayesian filtering in spamassassin really sucks ass. 100% processor usage, and 90MB of ram to process a 20MB set of mail.
With this tiered approach, I'd boot SA out of my setup.
Are there any projects that already do this, or will I have to script it up myself?
Mike
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
