Salvatore Toribio wrote:

Salvatore, thanks again for your help. Is this the right syntax in local.cf? Thanks.

BAYES_00               BODY: Bayesian spam probability is 0 to 1%
score BAYES_00 0 0 -2.901 -2.900
bayes_auto_learn_threshold_nonspam -1.5


In local.cf you only need the last two lines.

score BAYES_00 0 0 -2.901 -2.900
bayes_auto_learn_threshold_nonspam -1.5

But remember that your bayes database is wrong, so this won't be enough to solve your problem.

Login as the users who runs spamd and give the followed command:

sa-learn --dump | more

The output must be like this:

0.000          0          2          0  non-token data: bayes db version
0.000          0       1215          0  non-token data: nspam
0.000          0       1133          0  non-token data: nham
0.000          0     149066          0  non-token data: ntokens
........

If you have a big difference betwin nspam and nham, your database is unuseful.

Salvatore







Salvatore, looks like it's a lot difference.

[EMAIL PROTECTED] spamd]$ sa-learn --dump |more
0.000          0          2          0  non-token data: bayes db version
0.000          0          2          0  non-token data: nspam
0.000          0        144          0  non-token data: nham
0.000          0       8960          0  non-token data: ntokens

how do you delete the database? rm /home/spamd/.spamassassin/? Thanks for all your help!!

HUMM... Your database is not working yet, bayes only starts working when it has at least 200 nham and 200 nspam unless you have modified this values. So your problem is diferent.


I've detected tonight a BIG problem...

-8.0 HABEAS_SWE             Has Habeas warrant mark (http://www.habeas.com/)
-8.0 HABEAS_SWE             Has Habeas warrant mark (http://www.habeas.com/)
-8.0 HABEAS_SWE             Has Habeas warrant mark (http://www.habeas.com/)
-8.0 HABEAS_SWE             Has Habeas warrant mark (http://www.habeas.com/)
-8.0 HABEAS_SWE             Has Habeas warrant mark (http://www.habeas.com/)
-8.0 HABEAS_SWE             Has Habeas warrant mark (http://www.habeas.com/)
... skip another 60 mails

They have answered with this mail:

Thank you for your email to Habeas!

This message has been automatically generated in response to your email
regarding "Habeas Misuse", a summary of which appears below.

There is no need to reply to this message right now.  Your ticket has
been assigned an ID of [habeas.com 137835].

Habeas has recently come under attack from an as yet unidentified
spammer. The spammer is illegally utilizing the Habeas Warrant Mark in
emails which are promoting several pharmacy websites. The attack began
on Sunday January 11, 2004 at about 11am PT.

Habeas is aggressively pursuing this incident to stop this illegal
mailstream and to utilize the Habeas legal tools at our disposal to
punish the responsible spammer for copyright and trademark  violations.

So, a transient solution could be disablied "habeas" check until they fix the problem...


In local.cf add

score HABEAS_SWE -8.0

Regards

Salvatore



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to