Re: mail bounce warning for the list

2006-11-06 Thread Derek Harding
Gary W. Smith wrote: Was the SA group listed by spamcop last month? I just now received this for messages from October 26th. Who cares? <[EMAIL PROTECTED]>: 209.209.82.24 does not like recipient. Remote host said: 554 5.7.1 Service unavailable; Client host [140.211.11.2] blocked using

new here, big problem

2006-11-06 Thread sheryle Stafford
I sure hope you guys can help me out here. I am a non-techie that feels like she's entering a tech world. I receive an e-news type of deal daily through a reputable group in my line of business. I have received these for at least 2 years now with no problem. Last week they started getting i

Re: Do something useful with bad addresses?

2006-11-06 Thread John Rudd
John Andersen wrote: On Monday 06 November 2006 15:02, Derek Harding wrote: I suspect that the large amount of image spam that contains just bayes poison poisoned my bayes DB. Oh, I don't know... I think the concept of bayes poisoning has been pretty well debunked. Judging by the absence of

When Bayes goes bad... How to fix?

2006-11-06 Thread Bob Proulx
After working brilliantly for a long time suddenly the Bayes engine is misclassifying messages and creating false positives. Having a false positive every now and again is nothing new and I would train on error when that would occur and correct the issue. The problem I am seeing now is that when

Re: Do something useful with bad addresses?

2006-11-06 Thread Evan Platt
At 09:24 PM 11/6/2006, you wrote: Oh, I don't know... I think the concept of bayes poisoning has been pretty well debunked. Judging by the absence of false positives with high bayes scores, it seems like a theory looking for a proof. Where's Jamie Hyneman and Adam Savage when you need them?

Re: Do something useful with bad addresses?

2006-11-06 Thread John Andersen
On Monday 06 November 2006 15:02, Derek Harding wrote: > I suspect that the large amount of image spam that > contains just bayes poison poisoned my bayes DB. Oh, I don't know... I think the concept of bayes poisoning has been pretty well debunked. Judging by the absence of false positives with

mail bounce warning for the list

2006-11-06 Thread Gary W. Smith
Title: mail bounce warning for the list Was the SA group listed by spamcop last month?  I just now received this for messages from October 26th. <[EMAIL PROTECTED]>: 209.209.82.24 does not like recipient. Remote host said: 554 5.7.1 Service unavailable; Client host [140.211.11.2] blocked

Re: Do something useful with bad addresses?

2006-11-06 Thread John Rudd
Derek Harding wrote: On Mon, 2006-11-06 at 15:49 -0800, Evan Platt wrote: Just to clarify.. Yes, these would definitely be targeted addresses. I grepped my mail log for common spam I get and I'll add those. There is one problem with this approach though. All spam is learned. I tried this and I

Re: Default SpamAssassin scores don't make sense

2006-11-06 Thread List Mail User
>... >That's where the human tweaking is supposed to happen; if gobs of spam >flag the 80% meter of some test while no ham does, and the 90% meter is >almost never hit by anything, it should have a higher value than the 80% >meter does. If the 90% meter has more ham than spam despite the 80% meter

Re: Default SpamAssassin scores don't make sense

2006-11-06 Thread Matt Kettler
Adam Katz wrote: > Theo Van Dinter wrote: > >> http://wiki.apache.org/spamassassin/HowScoresAreAssigned >> > > Thanks, that's what I was looking for. > > >> The short version is that as far as SA and the perceptron (that which >> generates the scores) are concerned, rules are independent

Re: Default SpamAssassin scores don't make sense

2006-11-06 Thread Matt Kettler
Adam Katz wrote: > On Mon, 6 Nov 2006, John D. Hardin wrote: > >> The default scores are generated by analyzing their performance >> against hand-categorized corpa of actual emails. If a rule hits spam >> often and ham rarely, it will be given a higher score than one that >> hits spam often and

Re: Have SA delete a message

2006-11-06 Thread Theo Van Dinter
On Tue, Nov 07, 2006 at 03:21:40PM +1300, Simon wrote: > 'tag'ing spam correctly. What do i do to have sa delete the message > above a certain level? > > Is there a preference i can set somewhere? Stand on your head and chant "SA only marks up messages". :) ie: you can't have SA delete mails, yo

Re: Have SA delete a message

2006-11-06 Thread Kenneth Porter
On Tuesday, November 07, 2006 3:21 PM +1300 Simon <[EMAIL PROTECTED]> wrote: We are running debian sarge, with postfix and SpamAssassin 3.1.3. We have setup sa as a filter in postfix and it is now working and 'tag'ing spam correctly. What do i do to have sa delete the message above a certain lev

Have SA delete a message

2006-11-06 Thread Simon
Hi There, We are running debian sarge, with postfix and SpamAssassin 3.1.3. We have setup sa as a filter in postfix and it is now working and 'tag'ing spam correctly. What do i do to have sa delete the message above a certain level? Is there a preference i can set somewhere? Thanks Simon

Re: R: BIG increase in spam today

2006-11-06 Thread Benny Pedersen
On Thu, November 2, 2006 17:03, Randy Smith wrote: > I use policyd and give my users the ability to optout (or optin depending on > the domain settings) of greylisting if they choose. They can do it through a > plugin in SquirrelMail so, if they choose, they can turn it off for a few > minutes to

Re: Default SpamAssassin scores don't make sense

2006-11-06 Thread Adam Katz
Theo Van Dinter wrote: > http://wiki.apache.org/spamassassin/HowScoresAreAssigned Thanks, that's what I was looking for. > The short version is that as far as SA and the perceptron (that which > generates the scores) are concerned, rules are independent. There is no > "increase in severity", eit

Re: Do something useful with bad addresses?

2006-11-06 Thread John D. Hardin
On Mon, 6 Nov 2006, Evan Platt wrote: > Ok, so just to get a second (and third and so on opinion), I created > a user on my system, named it spambucket. Aliased the garbage > addresses to spambucket in /etc/postfix/aliases, then at midnight run > > sa-learn --spam -u primaryuser --mbox /private

Re: Do something useful with bad addresses?

2006-11-06 Thread John D. Hardin
On Mon, 6 Nov 2006, Derek Harding wrote: > On Mon, 2006-11-06 at 15:49 -0800, Evan Platt wrote: > > Just to clarify.. Yes, these would definitely be targeted addresses. > > I grepped my mail log for common spam I get and I'll add those. > > There is one problem with this approach though. All spa

Re: Do something useful with bad addresses?

2006-11-06 Thread Evan Platt
At 01:55 PM 11/6/2006, you wrote: Create the user accounts (which is the simplest way to get it to start accepting messages) and run sa-learn --spam against their mailboxes from cron.daily. Alternatively, create a single sa-honeypot user and redirect all your targeted bad addresses to that acco

Re: Do something useful with bad addresses?

2006-11-06 Thread Derek Harding
On Mon, 2006-11-06 at 15:49 -0800, Evan Platt wrote: > Just to clarify.. Yes, these would definitely be targeted addresses. > I grepped my mail log for common spam I get and I'll add those. There is one problem with this approach though. All spam is learned. I tried this and I suspect that the la

Re: Do something useful with bad addresses?

2006-11-06 Thread Evan Platt
At 03:15 PM 11/6/2006, you wrote: Did you miss the word "targeted"? I took the original poster to mean forward all the bad addresses _that you choose_ to sa-honeypot. Thus your scenario is only a problem if you choose to forward an address that's close to an actual address. Oh, yeah, I did rea

Re: Do something useful with bad addresses?

2006-11-06 Thread John Rudd
Derek Harding wrote: On Mon, 2006-11-06 at 14:34 -0800, John Rudd wrote: Alternatively, create a single sa-honeypot user and redirect all your targeted bad addresses to that account, and then run sa-learn --spam against that one mailbox from cron.daily. And then an important email comes into th

Re: Do something useful with bad addresses?

2006-11-06 Thread Derek Harding
On Mon, 2006-11-06 at 14:34 -0800, John Rudd wrote: > > > > Alternatively, create a single sa-honeypot user and redirect all your > > targeted bad addresses to that account, and then run sa-learn --spam > > against that one mailbox from cron.daily. > > > > And then an important email comes into

Re: Amazon / RFCI false positives

2006-11-06 Thread Chris Lear
jdow wrote: From: "Chris Lear" <[EMAIL PROTECTED]> * Tony Finch wrote (05/11/06 17:43): On Sat, 4 Nov 2006, Michael Scheidell wrote: So? Build something better. Its open source. Don't use the RFCI scores, drop them, stop bithing about somehting YOU can change. Well, I've added a -2 for emai

Re: Do something useful with bad addresses?

2006-11-06 Thread John Rudd
John D. Hardin wrote: On Mon, 6 Nov 2006, Evan Platt wrote: Off the bat, I wouldn't want to do it for every bad e-mail address, just a bunch of known bad ones, addresses that somehow got added to mailing lists, or the such. Any suggestions? Create the user accounts (which is the simplest w

Re: Default SpamAssassin scores don't make sense

2006-11-06 Thread Adam Katz
On Mon, 6 Nov 2006, John D. Hardin wrote: > The default scores are generated by analyzing their performance > against hand-categorized corpa of actual emails. If a rule hits spam > often and ham rarely, it will be given a higher score than one that > hits spam often and ham occasionally. That soun

Re: Default SpamAssassin scores don't make sense

2006-11-06 Thread Theo Van Dinter
On Mon, Nov 06, 2006 at 04:58:37PM -0500, Adam Katz wrote: > Why do default scores not increase with severity? For example, > SpamAssassin 3.1.7 has inconsistent progression of default scores in > html obfuscation, dates set in the future, and spf marking: http://wiki.apache.org/spamassassin/HowS

Re: Default SpamAssassin scores don't make sense

2006-11-06 Thread John D. Hardin
On Mon, 6 Nov 2006, Adam Katz wrote: > Why do default scores not increase with severity? For example, > SpamAssassin 3.1.7 has inconsistent progression of default scores in > html obfuscation, dates set in the future, and spf marking: The default scores are generated by analyzing their performan

Default SpamAssassin scores don't make sense

2006-11-06 Thread Adam Katz
(re-sending this email, last one sent 10/30 15:19 EST and not posted to list, despite that another message was sent to the list successfully only half an hour later.) Why do default scores not increase with severity? For example, SpamAssassin 3.1.7 has inconsistent progression of default scores

Re: Do something useful with bad addresses?

2006-11-06 Thread John D. Hardin
On Mon, 6 Nov 2006, Evan Platt wrote: > Off the bat, I wouldn't want to do it for every bad e-mail address, > just a bunch of known bad ones, addresses that somehow got added to > mailing lists, or the such. > > Any suggestions? Create the user accounts (which is the simplest way to get it to

Do something useful with bad addresses?

2006-11-06 Thread Evan Platt
Running postfix /spamassassin called via procmail.. Can I do something useful with bad address spam, rather than rejecting it? I don't know if this is a question for a postfix list or a spamassassin list, but perhaps automatically report it, and automatically learn as spam? Off the bat, I wo

Re: Spamassassin Score

2006-11-06 Thread Leander Koornneef
On 6-nov-2006, at 21:30, Rob Anderson wrote: Leander Koornneef <[EMAIL PROTECTED]> 11/06/06 02:26PM >>> As far as I know, there is no configuration option for this. > Try this from the docs under "Template Tags": _SCORE(PAD)_ message score, if PAD is inclu

Re: Spamassassin Score

2006-11-06 Thread Rob Anderson
>>> Leander Koornneef <[EMAIL PROTECTED]> 11/06/06 02:26PM >>> On 6-nov-2006, at 19:59, Claus Westerkamp wrote: > Hello list, > > Id like to modify the Score output of spamassassin. I want 3digits > display permanently (e.g. ***(Score002.3)*** or ***(Score102.3)*** ) > > Is this possible? I wan

Re: AWL Rule not Kicking in

2006-11-06 Thread Chris Purves
Magnus Anderson wrote: Hi, I have enabled AWL on my SpamAssassin configuration - local.cf # Store AWL in MySQL auto_whitelist_factory Mail::SpamAssassin::SQLBasedAddrList user_awl_dsnDBI:mysql:spamassassin:localhost user_awl_sql_username spamassassin u

Re: Spamassassin Score

2006-11-06 Thread Leander Koornneef
On 6-nov-2006, at 19:59, Claus Westerkamp wrote: Hello list, Id like to modify the Score output of spamassassin. I want 3digits display permanently (e.g. ***(Score002.3)*** or ***(Score102.3)*** ) Is this possible? I want it to be able to sort the spam-messages by Score. Of course this

Re: spammers dodging OCR

2006-11-06 Thread Jorge Valdes
Gary V wrote: This morning I received my copy of networkworld. Here is an interesting article: http://www.networkworld.com/columnists/2006/103006buzz-spammers-dodging-ocr.html Gary V _ Add a Yahoo! contact to Windows Live Mess

RE: Reg - Spamassassin --lint

2006-11-06 Thread Bowie Bailey
Evan Platt wrote: > At 11:45 AM 11/6/2006, you wrote: > > > when i run spamassassin --lint i get this error messages.. > > > > C:\test>spamassassin --lint > > Failed to parse line in SpamAssassin configuration, skipping: > > > > Failed to parse line in SpamAssassin configuration, skipping: > >

Re: Reg - Spamassassin --lint

2006-11-06 Thread Evan Platt
At 11:45 AM 11/6/2006, you wrote: when i run spamassassin --lint i get this error messages.. C:\test>spamassassin --lint Failed to parse line in SpamAssassin configuration, skipping: Failed to parse line in SpamAssassin configuration, skipping: Failed to parse line in SpamAssassin configurati

Reg - Spamassassin --lint

2006-11-06 Thread san
when i run spamassassin --lint i get this error messages.. C:\test>spamassassin --lint Failed to parse line in SpamAssassin configuration, skipping: Failed to parse line in SpamAssassin configuration, skipping: Failed to parse line in SpamAssassin configuration, skipping: Failed to parse line

AWL Rule not Kicking in

2006-11-06 Thread Magnus Anderson
Hi, I have enabled AWL on my SpamAssassin configuration - local.cf # Store AWL in MySQL auto_whitelist_factory Mail::SpamAssassin::SQLBasedAddrList user_awl_dsnDBI:mysql:spamassassin:localhost user_awl_sql_username spamassassin user_awl_sql_password

Spamassassin Score

2006-11-06 Thread Claus Westerkamp
Hello list, Id like to modify the Score output of spamassassin. I want 3digits display permanently (e.g. ***(Score002.3)*** or ***(Score102.3)*** ) Is this possible? I want it to be able to sort the spam-messages by Score. thanx claus

bondedsender.org timeouts

2006-11-06 Thread Ken A
Anyone seeing issues with rbl checks going to sa-trusted.bondedsender.org & sa-other.bondedsender.org ? Seeing some timeouts here this am. Any known issues? Ken A. Pacific.Net

RE: Completely disable spamassassin for a given mailbox

2006-11-06 Thread Benny Pedersen
On Mon, November 6, 2006 17:46, Chris Santerre wrote: >> home directory to do this, but can't seem to find out >> exactly how to do it. > edit the file? vi? pico is my favorite. was the procmailrc on sitewide, then it does not help to do anything on user basis > Can you post the procmail file

Re: Amazon / RFCI false positives

2006-11-06 Thread Justin Mason
jdow writes: > From: "Chris Lear" <[EMAIL PROTECTED]> > >* Tony Finch wrote (05/11/06 17:43): > >> On Sat, 4 Nov 2006, Michael Scheidell wrote: > >> > >>> So? Build something better. Its open source. Don't use the RFCI scores, > >>> drop them, stop bithing about somehting YOU can change. > >> >

Re: How to set up Razor

2006-11-06 Thread Chris Purves
David Baron wrote: Installed it off Debian Sid. How do I get SA to make use of it? less /usr/share/doc/razor/README.Debian -- Chris

Re: Log Mail Caught As Spam

2006-11-06 Thread jdow
From: "itdelany" <[EMAIL PROTECTED]> Hi :) I successfully run spamassassin with bayes filter on my site and is working really really fine. But, this morning i noticed that an email i receive everyday from my server (It's from LogWatch application, it sends detailed log information from past ev

Re: Completely disable spamassassin for a given mailbox

2006-11-06 Thread jdow
So read the procmailex man page and figure out how to detect the recipient's name. If the name matches the honeypot then simply stop processing at that point. The data is in there. It's not "obvious" of course. I am betting my configuration is enough different from yours that any methods I use w

Re: Completely disable spamassassin for a given mailbox

2006-11-06 Thread jdow
From: "Geoff" <[EMAIL PROTECTED]> Hi (my first post here!), I have a honeypot mailbox that I want to turn off the spamassassin engine for. I need to stop spamassassin completely from processing mail for this mailbox, so setting rule scores is not the answer here. Spamassassin is invoked from p

Re: Amazon / RFCI false positives

2006-11-06 Thread jdow
From: "Chris Lear" <[EMAIL PROTECTED]> * Tony Finch wrote (05/11/06 17:43): On Sat, 4 Nov 2006, Michael Scheidell wrote: So? Build something better. Its open source. Don't use the RFCI scores, drop them, stop bithing about somehting YOU can change. Well, I've added a -2 for email from Amazon

Re: Block "wrote:" spams

2006-11-06 Thread Benny Pedersen
On Sat, November 4, 2006 19:33, John Rudd wrote: > For the "wrote:" spams that come through here, I think all of them are > being caught by my RelayChecker plugin (which I've posted in other threads). i have this installed with imho do a very good job of stopping spam, thanks for makeing it --

Re: Amazon / RFCI false positives

2006-11-06 Thread Benny Pedersen
On Mon, November 6, 2006 12:46, Ralf Hildebrandt wrote: > Dunno. I wrote about this to [EMAIL PROTECTED] and never got a > reply. maybe it sent to /dev/null in there end :( i send mail to postmaster when i find a domain that does not handle things right, newer got a usefull reply from hotmail.c

spammers dodging OCR

2006-11-06 Thread Gary V
This morning I received my copy of networkworld. Here is an interesting article: http://www.networkworld.com/columnists/2006/103006buzz-spammers-dodging-ocr.html Gary V _ Add a Yahoo! contact to Windows Live Messenger for a chance

RE: Completely disable spamassassin for a given mailbox

2006-11-06 Thread Geoff
Hi, Here's the global /etc/procmailrc file: INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc ...and here's the included spamassassin-default.rc file # send mail through spamassassin :0fw | /usr/bin/spamassassin So it doesn't get much simpler than that. As yet there is no .procmailrc file

RE: Completely disable spamassassin for a given mailbox

2006-11-06 Thread Chris Santerre
Title: RE: Completely disable spamassassin for a given mailbox > -Original Message- > From: Geoff [mailto:[EMAIL PROTECTED]] > Sent: Monday, November 06, 2006 11:06 AM > To: users@spamassassin.apache.org > Subject: Completely disable spamassassin for a given mailbox > > > Hi (my fi

Re: Spam used whitelist?

2006-11-06 Thread Daryl C. W. O'Shea
John Fleming wrote: Real novice here - Would someone please explain how a stock spam was able to use my whitelist to get a huge negative score? I do have a whitelist, but the user shown below is not in it. I do have one Italian (.it) domain in the whitelist, but it is a different/address domain

Re: Spam used whitelist?

2006-11-06 Thread Matt Kettler
John Fleming wrote: > Real novice here - Would someone please explain how a stock spam was > able to use my whitelist to get a huge negative score? I do have a > whitelist, but the user shown below is not in it. Check the Return-Path header. Is [EMAIL PROTECTED] in your whitelist_from? If so, th

Completely disable spamassassin for a given mailbox

2006-11-06 Thread Geoff
Hi (my first post here!), I have a honeypot mailbox that I want to turn off the spamassassin engine for. I need to stop spamassassin completely from processing mail for this mailbox, so setting rule scores is not the answer here. Spamassassin is invoked from procmail on our system. I believe I ca

Spam used whitelist?

2006-11-06 Thread John Fleming
Real novice here - Would someone please explain how a stock spam was able to use my whitelist to get a huge negative score? I do have a whitelist, but the user shown below is not in it. I do have one Italian (.it) domain in the whitelist, but it is a different/address domain. How did this msg ge

Re: spam

2006-11-06 Thread Randy Smith
On Monday 06 November 2006 06:28, Maccie Roux wrote: > Hi. > > I'm running Fedora Core 5 with Postfix Dovecot Open LDAP and spamassassin. > Everything is working fine and spamassassin tags the spam correct, but > I want to know how to move the spam mail to a separate mailbox. You'll need a filter

Re: How to set up Razor

2006-11-06 Thread Gary V
On Mon, Nov 06, 2006 at 02:57:30PM +0200, David Baron wrote: > Installed it off Debian Sid. > How do I get SA to make use of it? The SpamAssassin wiki is your friend: http://wiki.apache.org/spamassassin/ Here are just two of the many references to Razor. UsingRazor: http://wiki.apache.org/spamas

Re: Log Mail Caught As Spam

2006-11-06 Thread itdelany
Magnus Holmgren wrote: > > A better approach however would be to skip running those messages through > SA > at all, or to whitelist the sender address (read about whitelist_from_rcvd > in > Mail::SpamAssassin::Conf(3pm) manual page. Also, is the server in > trusted_networks? > The server th

Re: Log Mail Caught As Spam

2006-11-06 Thread Magnus Holmgren
On Monday 06 November 2006 13:59, itdelany took the opportunity to say: > I successfully run spamassassin with bayes filter on my site and is working > really really fine. But, this morning i noticed that an email i receive > everyday from my server (It's from LogWatch application, it sends detaile

spam

2006-11-06 Thread Maccie Roux
Hi. I'm running Fedora Core 5 with Postfix Dovecot Open LDAP and spamassassin. Everything is working fine and spamassassin tags the spam correct, but I want to know how to move the spam mail to a separate mailbox. Hope someone can help me. Thanks Maccie Roux

Resending ham failes and go to quarantine

2006-11-06 Thread Leon Kolchinsky
M, <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, Yes, hits=5.4 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_99, quarantine spam-fd4fb4374df425aa3c2de2a2cf49e0d2-20061106-151933-32677-09 ([EMAIL PROTECTED]) Nov 6 15:19:33 mail.edu.haifa.ac.il amavisd[32677]: (32677-09) BAD HEADER f

Re: How to set up Razor

2006-11-06 Thread Ollie Acheson
On Mon, Nov 06, 2006 at 02:57:30PM +0200, David Baron wrote: > Installed it off Debian Sid. > How do I get SA to make use of it? The SpamAssassin wiki is your friend: http://wiki.apache.org/spamassassin/ Here are just two of the many references to Razor. UsingRazor: http://wiki.apache.org/spamass

Log Mail Caught As Spam

2006-11-06 Thread itdelany
Hi :) I successfully run spamassassin with bayes filter on my site and is working really really fine. But, this morning i noticed that an email i receive everyday from my server (It's from LogWatch application, it sends detailed log information from past events, like users logons and postfix stat

How to set up Razor

2006-11-06 Thread David Baron
Installed it off Debian Sid. How do I get SA to make use of it?

Re: Amazon / RFCI false positives

2006-11-06 Thread Ralf Hildebrandt
* Benny Pedersen <[EMAIL PROTECTED]>: > correct. if 100 happy amazon.com users complain to amazon.com about there > listing in rfci, what will happend then ? Dunno. I wrote about this to [EMAIL PROTECTED] and never got a reply. > does amazon.com know there faults ? Yes, they fixed the issu

RE: Amazon / RFCI false positives

2006-11-06 Thread Benny Pedersen
On Sun, November 5, 2006 18:43, Tony Finch wrote: > On Sat, 4 Nov 2006, Michael Scheidell wrote: >> So? Build something better. Its open source. Don't use the RFCI scores, >> drop them, stop bithing about somehting YOU can change. > Well, I've added a -2 for email from Amazon, but I thought other

Re: spam filter working, but not well

2006-11-06 Thread Peter Teunissen
On 6-nov-2006, at 1:54, John Andersen wrote: On Sunday 05 November 2006 15:48, Brian S. Meehan wrote: Hi all, Spam filtering is working, but I'm getting about half the spam in my mailbox. Anyone have tips on adjustments I could make? Here's what I have in the local.cf file: rewrite_header SUB

Re: Amazon / RFCI false positives

2006-11-06 Thread Chris Lear
* Tony Finch wrote (05/11/06 17:43): > On Sat, 4 Nov 2006, Michael Scheidell wrote: > >> So? Build something better. Its open source. Don't use the RFCI scores, >> drop them, stop bithing about somehting YOU can change. > > Well, I've added a -2 for email from Amazon, but I thought other people >

Re: Bayes 0.5 on everything

2006-11-06 Thread jdow
From: "Marc Perkel" <[EMAIL PROTECTED]> What would cause all messages to score 0.5 on everything? Mistrained Bayes database. I betcha forgot to train spam and ham differently or trained spam and ham with the same messages. {^_^}