Re: Bayes + DCC / Bayes as a false-positive killer

2013-05-29 Thread RW
On Wed, 29 May 2013 15:16:58 -0400 Andrew Talbot wrote: > Hi there, RW- > > Thank you for your response. A lot of interesting points in there. The > issue with something like Bogofilter or its ilk is that it: > 1- Requires manual intervention from users (we don't have access to > the content of t

Re: Bayes + DCC / Bayes as a false-positive killer

2013-05-29 Thread Matus UHLAR - fantomas
On 29.05.13 15:19, Andrew Talbot wrote: I wanted to ask you about your last point about the bayes9x fps and the 0x fns, mostly because it seems like that contradicts the sentence that follows (that you don't consider it to be 100%). If there's no FNs or FPs, it's about as good as it gets, no? I

Re: Bayes + DCC / Bayes as a false-positive killer

2013-05-29 Thread Andrew Talbot
Hi, Matus - I wanted to ask you about your last point about the bayes9x fps and the 0x fns, mostly because it seems like that contradicts the sentence that follows (that you don't consider it to be 100%). If there's no FNs or FPs, it's about as good as it gets, no? On Wed, May 29, 2013 at 3:13 A

Re: Bayes + DCC / Bayes as a false-positive killer

2013-05-29 Thread Andrew Talbot
Hi there, RW- Thank you for your response. A lot of interesting points in there. The issue with something like Bogofilter or its ilk is that it: 1- Requires manual intervention from users (we don't have access to the content of their messages) 2- Apparently doesn't scale well to huge client bases

Re: Bayes + DCC / Bayes as a false-positive killer

2013-05-29 Thread Andrew Talbot
Hi, Dave - We don't have anything else learning because we deal in such bulk. We're an email service provider hosting hundreds of thousands of accounts. Re: Your last line about "I don't understand what their concerns are" ... Welcome to my world. Right now I am manually writing rules - custo

Re: Sare anda OpenProject Updates

2013-05-29 Thread Bowie Bailey
On 5/28/2013 8:14 AM, RW wrote: On Mon, 27 May 2013 18:02:10 -0400 dar...@chaosreigns.com top-posted: On 05/27, Rejaine Monteiro wrote: Hello guys, There are still some active rules update channel? Sare and Open looks that are no longer available... "The SARE rules are broken to the point of

Re: Bayes + DCC / Bayes as a false-positive killer

2013-05-29 Thread RW
On Tue, 28 May 2013 16:43:20 -0400 Andrew Talbot wrote: > Hey all - > > I've got two questions: > > 1- > >... > That said, I'm wondering if it's redundant to run DCC and Bayes at > the same time? From what I understand, DCC is a subscription-based > service, so it would be nice to be able to cu

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

2013-05-29 Thread Simon Loewenthal
On 2013-05-29 12:43, Matus UHLAR - fantomas wrote: > On 29.05.13 12:29, Simon Loewenthal wrote: > >> The socket seems ok to me: srw-rw-rw- 1 clamav clamav 0 May 14 21:43 >> /var/run/clamav/clamd.ctl > > what are permissions for /var/run/clamav ? drwxr-xr-x Since the enabling of debug, I

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

2013-05-29 Thread Matus UHLAR - fantomas
On 29.05.13 12:29, Simon Loewenthal wrote: The socket seems ok to me: srw-rw-rw- 1 clamav clamav 0 May 14 21:43 /var/run/clamav/clamd.ctl what are permissions for /var/run/clamav ? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail adve

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

2013-05-29 Thread Simon Loewenthal
On 2013-05-29 11:40, Mark Martinec wrote: > Simon, > >> I looked at scoring for an email on an SA installation and noticed >> differences between hand scanning with spamc and scanning with spamd. My >> manually scanned email hit CLAMAV sane security, (ignore Bayes because the >> user had B

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

2013-05-29 Thread Mark Martinec
Simon, > I looked at scoring for an email on an SA installation and noticed > differences between hand scanning with spamc and scanning with spamd. My > manually scanned email hit CLAMAV sane security, (ignore Bayes because > the user had Bayes process this and then asked me about this), whilst >

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

2013-05-29 Thread Jari Fredriksson
29.05.2013 11:20, Simon Loewenthal kirjoitti: > > On 2013-05-29 9:21, Matus UHLAR - fantomas wrote: > >> On 28.05.13 17:30, Simon Loewenthal wrote: >>> I looked at scoring for an email on an SA installation and noticed >>> differences between hand scanning with spamc and scanning with >>> spamd. My

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

2013-05-29 Thread Simon Loewenthal
On 2013-05-29 9:21, Matus UHLAR - fantomas wrote: > On 28.05.13 17:30, Simon Loewenthal wrote: > >> I looked at scoring for an email on an SA installation and noticed >> differences between hand scanning with spamc and scanning with spamd. My >> manually scanned email hit CLAMAV sane securi

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

2013-05-29 Thread Matus UHLAR - fantomas
On 28.05.13 17:30, Simon Loewenthal wrote: I looked at scoring for an email on an SA installation and noticed differences between hand scanning with spamc and scanning with spamd. My manually scanned email hit CLAMAV sane security, (ignore Bayes because the user had Bayes process this and then as

Re: Bayes + DCC / Bayes as a false-positive killer

2013-05-29 Thread Matus UHLAR - fantomas
On 28.05.13 16:43, Andrew Talbot wrote: That said, I'm wondering if it's redundant to run DCC and Bayes at the same time? From what I understand, DCC is a subscription-based service, so it would be nice to be able to cut that cost out! No, it is not. It only requires you using other than public