Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
Good morning. The output of sa-learn --dump magic after bayes learning is +1 nspam/nham. I tried the command several. times. I tried write the mail with Subject: viagra; body: viagra and sent it from my first account to the my second account(score 0,4). Then I used sa-learn -spam for this mail. I

Re: SA-learn (spamassassin)

2009-08-02 Thread Matt Kettler
monolit wrote: > Question is logical. When SA learnt new spam/ham so SA have to write new info > to the database and I think that database have to increase size. If you have > for example *.doc file and you modify it. You add several words - *.doc will > be bigger(increase his size). > The datab

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 14:43 -0700, an anonymous Nabble user wrote: > To by Karsten Bräckelmann-2: I want to apologize for my approach - I use > Ubuntu and other forums because I am hopeless because my homework was > install configure and run antispam(spamassassin, ClamAV, Clamsmtp,razor, > postfix)

Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
To Benny Pedersen: I understand your explanation about increasing of spamassassin database. Your example with md5 is clearly. Ok thank you very much! To by Karsten Bräckelmann-2: I want to apologize for my approach - I use Ubuntu and other forums because I am hopeless because my homework was inst

Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
I'm starting to seriously wonder, what your homework actually is about. On Sun, 2009-08-02 at 13:05 -0700, an anonymous Nabble user wrote: > Your command works! I found in spamassassin -D razor2 < sample.msg 2>&1 | > less message the following: > check[9444]: [ 6] a=c&e=4&ep4=7542-10&s=4uO_brp

Re: SA-learn (spamassassin)

2009-08-02 Thread Benny Pedersen
On Sun, 2 Aug 2009 13:20:41 -0700 (PDT), monolit wrote: > Question is logical. so are google :) > When SA learnt new spam/ham so SA have to write new info > to the database and I think that database have to increase size. no, my bayes db is around 150M, but all my mail is in webmail at 800M so

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 11:53 -0700, an anonymous Nabble user wrote: > I have theory ...I know you will think thats bad but I tried explain how I > understand SA documentation. When I set the "bayes_min_spam_num 1" so it > means that Bayes learn system will be activate. And now for example: I got As

Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
Question is logical. When SA learnt new spam/ham so SA have to write new info to the database and I think that database have to increase size. If you have for example *.doc file and you modify it. You add several words - *.doc will be bigger(increase his size). -- View this message in context: h

Re: Razor, spamassassin - network test

2009-08-02 Thread monolit
Your command works! I found in spamassassin -D razor2 < sample.msg 2>&1 | less message the following: check[9444]: [ 6] a=c&e=4&ep4=7542-10&s=4uO_brp3_KWEDuqMYXBVHI-4-FwA But I dont know how to recognize that is a signature(hash) of the mail. In the old version it was clearly marked for example

Re: SA-learn (spamassassin)

2009-08-02 Thread me
On Sun, 2 Aug 2009 11:53:53 -0700 (PDT), monolit wrote: > What is strange when I use SA-LEARN so database dont expand the size, but > the time of modification is the same when I sa-learn started. question is ?

Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
FROM SA WWW bayes_min_ham_num (Default: 200) bayes_min_spam_num (Default: 200) To be accurate, the Bayes system does not activate until a certain number of ham (non-spam) and spam have been learned. The default is 200 of each ham and spam, but you can tune these up or down with these two setti

Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 11:17 -0700, monolit wrote: > I understand that I must read whole output(message(TOP message)). But the > output this command is very fast and it stop at the end. I dont catch TOP of > message. I tried "| more" switch but it didint help. I tried redirecting > output to the fil

Re: Razor, spamassassin - network test

2009-08-02 Thread monolit
I understand that I must read whole output(message(TOP message)). But the output this command is very fast and it stop at the end. I dont catch TOP of message. I tried "| more" switch but it didint help. I tried redirecting output to the file but it doesnt work. The file was empty:( I dont know ho

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 18:31 +0100, RW wrote: > > > AFAIK it doesn't affect autoleaning at all, bayes_min_spam_num & > > > bayes_min_ham_num control when scoring starts. > > > > Well, it *does* nonetheless. *shrug* > If you read back you'll see that that's consistent with what I wrote and > the op

Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
Getting kind of a headache, trying to wrap my head around this confusing mess. Anyway, here's my shot at this. On Sun, 2009-08-02 at 03:31 -0700, an anonymous Nabble user wrote: > > > When I use spamassassin -t -D razor2 < /tmp/spam > > > so I dont get the hash and so on but content analysis > > >

Re: SA-learn (spamassassin)

2009-08-02 Thread RW
On Sun, 02 Aug 2009 17:15:52 +0200 Karsten Bräckelmann wrote: > On Sun, 2009-08-02 at 02:00 +0100, RW wrote: > > On Sun, 02 Aug 2009 01:42:21 +0200 Karsten Bräckelmann wrote: > > > It's a counter-measure against bad learning, to force at least > > > some MINIMAL manual training, before auto-lear

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 04:36 -0700, an anonymous Nabble user wrote: > I changed the value on "1"(I use this for testing and my self-learning its > my homework). According to me - spam bayes learning was activated. When I > use sa-learning so bayes learn that the mail is spam. And bayes learn the > s

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 02:00 +0100, RW wrote: > On Sun, 02 Aug 2009 01:42:21 +0200 Karsten Bräckelmann wrote: > > > when I learn bayes by hand (sa-learn --spam --file mail) that this > > > mail is spam? I have explicit set in local.cf bayes_min_spam_num 1. > > > This means that for bayes is suffici

Re: Network Tests / Rule Files Directories

2009-08-02 Thread Karsten Bräckelmann
On Sat, 2009-08-01 at 18:15 -0700, Stefan Malte Schumacher wrote: > > Evidence that it's not working? Show us some SA headers. In this case, a > > spam sample that triggered DCC, cause the Report header does show the > > rule's score. Hmm, I wasn't clear enough. :) I meant an identified spam, whe

Re: SA-learn (spamassassin)

2009-08-02 Thread RW
On Sun, 2 Aug 2009 04:36:34 -0700 (PDT) monolit wrote: > > I changed the value on "1"(I use this for testing and my > self-learning its my homework). According to me - spam bayes learning > was activated. When I use sa-learning so bayes learn that the mail is > spam. And bayes learn the signatu

Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
I read spamassassin docs... I found out the following: Sa-learn --spam Learn the input message(s) as spam. If you have previously learnt any of the messages as ham, SpamAssassin will forget them first, then re-learn them as spam. Alternatively, if you have previously learnt them as spam, it'll

Re: blacklisting a forger

2009-08-02 Thread mouss
Terry Carmen a écrit : >> On Sat, 1 Aug 2009 19:33:40 -0400 >> "Terry Carmen" wrote: >> >>> The backscatter would not have been received, since the sender is on >>> a number of RBLs. >> It's the IP address of the botnet PC that's on the RBLs, the backscatter >> doesn't come from there, it comes fr

Re: Razor, spamassassin - network test

2009-08-02 Thread monolit
I am really sorry it was mistake - I was yesterday very tired. Back on-list. I'm not a personal help-line. When I use spamassassin -t -D razor2 < /tmp/spam so I dont get the hash and so on but content analysis > > details...bayes clasification and so on. I expected message like debug: Razor i