Re: spam getting through because of bayes confidence

2008-07-13 Thread Kathryn Kleinschafer
Sorry not sure what I was doing wrong before but it is hitting now. Thanks Kate Jared Hall wrote: header LOCAL_REMINDERSubject =~ /^REMINDER NOTIFICATION/ score LOCAL_REMINDER5.0 Regards, Jared Hall General Telecom, LLC. Kathryn Kleinschafer wrote: Hi all, I have

Re: spam getting through because of bayes confidence

2008-07-13 Thread Kathryn Kleinschafer
Hi Jared, Thanks for the help. I have made the file LOCALK.cf in my /etc/mail/spamassassin/ folder and run spamassassin --lint (no errors) However when I test the message it is not hitting the rule. Am I supposed to reload a service or is there something else I have missed? Thanks Kate Jared

Errors in KAM rules on lint test

2008-07-13 Thread Kathryn Kleinschafer
Hi all, I was testing a rule using the spamassassin -D --lint and I noticed a few errors like the one below. Does this mean one of my rulesets is out of date? meta test KAM_BLANK01 has undefined dependency 'UNDISC_RECIPS' Thanks Kate

Re: spam getting through because of bayes confidence

2008-07-13 Thread Kathryn Kleinschafer
Hi, Our system does train Ham and I do train spam that gets through (where possible). I thought though that training say 5 emails as spam (assuming they were all the same) won't necessarily change the Bayes confidence, is this not correct? Kate Bowie Bailey wrote: Alex Woick wrote: BAY

Re: SPF-check works, but Whitelist-by-SPF does not

2008-07-13 Thread Wil Decius
> if mail contains Received headers indicating that mail was forwarded by a > trusted hop (a hop is not necessarily a box. it may be a proxy, an MTA > instance, ... etc), then addresses may have been rewritten and are thus > "untrusted". On my box there's only my mail server & SA. No proxies etc.

Re: sa-addon-stats.pl

2008-07-13 Thread Bill Randle
On Sun, 2008-07-13 at 21:01 -0400, Michael Scheidell wrote: > Nice looking script, where can I download it? > I found it here: http://markmail.org/download.xqy?id=pb36yqssesebgdhj&number=1 -Bill

Re: sa-addon-stats.pl

2008-07-13 Thread Michael Scheidell
Nice looking script, where can I download it? -- Michael Scheidell, CTO >|SECNAP Network Security Winner 2008 Network Products Guide Hot Companies FreeBSD SpamAssassin Ports maintainer _ This email has been scanned and cer

Re: SPF-check works, but Whitelist-by-SPF does not

2008-07-13 Thread mouss
Wil Decius wrote: On Sun, Jul 13, 2008 at 3:30 PM, mouss <[EMAIL PROTECTED]> wrote: If mail is forwarded by a trusted hop before SA, you need always_trust_envelope_sender=1 There's nothing special about this SA installation. It's just SA running @ "mail.mydomain.com". I'm doing no f

Re: SPF-check works, but Whitelist-by-SPF does not

2008-07-13 Thread Wil Decius
On Sun, Jul 13, 2008 at 3:30 PM, mouss <[EMAIL PROTECTED]> wrote: > If mail is forwarded by a trusted hop before SA, you need > > always_trust_envelope_sender=1 There's nothing special about this SA installation. It's just SA running @ "mail.mydomain.com". I'm doing no forwarding from one box to

Re: sa-addon-stats.pl

2008-07-13 Thread Chris
On Sunday 13 July 2008 5:56 pm, Bill Randle wrote: > > > > I'm not good at scripts so possibly you could find a way to fix this? I > > would have emailed you privately however, I don't have your email address > > so had to post to the list. > > Chris, > > This is actually working as designed. Acco

Re: SPF-check works, but Whitelist-by-SPF does not

2008-07-13 Thread mouss
Wil Decius wrote: I'm trying to get Spamassassin local configuration setup to whitleist-by-SPF. The box, as delivered to me, runs Debian with spamassassin -V SpamAssassin version 3.2.5-r609689 running on Perl version 5.8.8 In local.cf I've added whitelist_from_spf [EMAIL PR

Re: sa-addon-stats.pl

2008-07-13 Thread Bill Randle
On Sun, 2008-07-13 at 16:52 -0500, Chris wrote: > Bowie, you wrote this script back in 2006, I've been running it since back in > Aug 0f 2006 and today just noticed something. The addition doesn't seem to be > quite right. For instance: > > FreeMail.cf: > Rule Name Score

sa-addon-stats.pl

2008-07-13 Thread Chris
Bowie, you wrote this script back in 2006, I've been running it since back in Aug 0f 2006 and today just noticed something. The addition doesn't seem to be quite right. For instance: FreeMail.cf:   Rule Name                     Score     Ham   Spam   %of Ham   %of Spam  

Re: not enough usable tokens for Bayes?

2008-07-13 Thread Kai Schaetzl
Theo Van Dinter wrote on Sun, 13 Jul 2008 12:24:29 -0400: > This means there weren't enough tokens in the message. Thanks, Theo, for the quick answer. Ok, false alarm? I used a real message and now I get Bayes and a score. BUT: I ran the lint under 3.2.4 on two different machines. The first show

Re: not enough usable tokens for Bayes?

2008-07-13 Thread Theo Van Dinter
On Sun, Jul 13, 2008 at 06:09:03PM +0200, Kai Schaetzl wrote: > I get a weird Bayes result on one of my machines. It tells me there are > too few tokens, although it should have much more than enough. > > [29963] dbg: bayes: cannot use bayes on this message; not enough usable > tokens found Thi

not enough usable tokens for Bayes?

2008-07-13 Thread Kai Schaetzl
I get a weird Bayes result on one of my machines. It tells me there are too few tokens, although it should have much more than enough. SA 3.2.4, Bayes on local db. [29963] dbg: bayes: DB journal sync: last sync: 1215920690 [29963] dbg: bayes: corpus size: nspam = 62748, nham = 42637 [29963] dbg:

Re: 6.8mb spam

2008-07-13 Thread Michelle Konzack
Hi chris, Am 2008-07-10 19:45:30, schrieb Chris: > Anyone seen these lately? The spam consists of a multi-mb .pps between 3 and > as of this occurance 6.8mb. I've got my procmail recipe for calling sa set to > 3mb currently: Since you are calling spamassassin from procmail, I would not even all

Re: spam getting through because of bayes confidence

2008-07-13 Thread mouss
Alex Woick wrote: BAYES_00 means that the bayes engine thinks the message is definitely not spam. If this rule is hitting on spam messages, you have a problem. Unless this is just a really hammy looking spam, you may want to consider retraining your bayes database. And regardless, you should al