Bayes spam and ham out of proportion

I've been running spamassassin for years. I am using auto-learn with very conservative thresholds. However, after several years of usage my spam database is about three time larger than my ham database and I am starting to see false positives. Is there a way how to "shrink" the spam database? T

Unable to update SARE

Since yesterday, when running sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A I get Use of uninitialized value in concatenation (.) or string at /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Scalar/Util.pm line 30. An example line from sare-sa-upd

Re: msrbl.com disappeared

René Berber wrote: mouss wrote: Frank Bures wrote: I could not update SANE Security signatures in the last couple of days. It looks like domain msrbl.com disappeared. Could please anyone shed some light on this? $ host msrbl.com msrbl.com has address 64.22.86.210 msrbl.com mail is handled

msrbl.com disappeared

Hi, I could not update SANE Security signatures in the last couple of days. It looks like domain msrbl.com disappeared. Could please anyone shed some light on this? Thanks Frank -- <[EMAIL PROTECTED]>

Errors after upgrade to 3.2.2

After yesterday upgrade to 3.2.2 I am seeing these in the logs (upon spamd restart): spamd[19878]: rules: meta test FM__TIMES_2 has dependency 'FH_HOST_EQ_D_D_D_D' with a zero score spamd[19878]: rules: meta test FM_SEX_HOST has dependency 'FH_HOST_EQ_D_D_D_D' with a zero score An

Re: FuzzyOCR error messages

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 16 Apr 2007 09:51:59 -0400 (EDT), Frank Bures wrote: >For no apparent reason I started to see the following error messages (huge >amounts of them) when I run 'sa-learn' or 'spamassassin --lint' > >Use of u

FuzzyOCR error messages

fig.pm line 691. Use of uninitialized value in concatenation (.) or string at /etc/mail/spamassassin/FuzzyOcr/Config.pm line 692. Any ideas would be apppreciated. Thanks Frank Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public

whitelist_allows_relays is ignored

misunderstanding something? Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=Frank+Bures Please, reply to the above address only. does not accept replies. -B

Re: GMail is now signing their mail with DKIM

c] Error 255 /usr/bin/make test -- NOT OK Running make install make test had returned bad status, won't install without force Any suggestions? (Running SA 3.1.8) Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public

Re: FuzzyOcr 3.5.1- error messages in logs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 15 Jan 2007 20:34:38 +0100, Mark Martinec wrote: >Frank Bures writes: > >> Since I updated to 3.5.1 from 3.4.2, I am sometimes getting the following >> FuzzyOcr: Error running preprocessor(pamthreshold): >> /usr/local/

FuzzyOcr 3.5.1- error messages in logs

ld): /usr/local/bin/pamthreshold -simple -threshold 0.5 FuzzyOcr: Errors in Scanset "ocrad-decolorize" FuzzyOcr: Return code: 256, Error: pamthreshold: bad magic number - not a PAM, PPM, PGM, or PBM file Any explanation? Thanks Frank Bures, Dept. of Chemistry, University

failed to run FUZZY_OCR test, skipping:

/perl5/site_perl/5.8.5/MLDBM/Serializer/Storable.pm line 20 My SpamAssassin runs as UID 'spamd'. Any ideas would be appreciated. Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu

Re: Simple script that rejects mail from spammers

You just reinvented the wheel. http://www.spamshield.org/ Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=Frank+Bures -BEGIN PGP SIGNATURE- Version:

Re: improving the sa-update process

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 17 Oct 2006 11:03:20 -0700, Jo Rhett wrote: >Frank Bures wrote: >> Or you can check that spamassassin is running after restart and if not, start >> it again. Also you can check that there actually was an update before

Re: improving the sa-update process

in time for the new process >to get it -- which sometimes happen when stopping then starting it in a >rc script / whatever. Or you can check that spamassassin is running after restart and if not, start it again. Also you can check that there actually was an update before doing the restart

Re: How to disable autolearn for FuzzyOcr?

FuzzyOCR I have to agree. I take back my original query :-) Everything seems to be perfectly fine with Bayes. Processing some 100k messages a day. Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:

RE: How to disable autolearn for FuzzyOcr?

gt; > >I think what the original poster was asking was how to make the >gibberish bodies not get Bayes scanned, so as to not pollute the >database with text that isn't spammy. Exactly my point. Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http:

How to disable autolearn for FuzzyOcr?

legitimately looking text and I worry about the possibility of Bayes poisoning. Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=Frank+Bures -BEGIN PGP SIGNA

Problems installing FuzzyOCR on RHEL4

talled and libnetpbm.so.* are available. What gives? Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=Frank+Bures -BEGIN PGP SIGNATURE- Version:

spamd would not start after sa-update

hanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=Frank+Bures -BEGIN PGP SIGNATURE- Version: PGPfreeware 5.0 OS/2 for non-commercial use Comment: PGP 5.0

Question about whitelist_from_rcvd

] *.somelist.org but the definition does not seem to be working. Is the '*' wild card use in whitelist_from_rcvd allowed? Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=in

Re: Several problems with SA 3.1

^X-Spam-Status: Yes". Anyhow this way it >is working. I wonder why this changed from one day to other... Procmail recipes are by default case insensitive. If you want to make them case sensitive, you have to include parameter "D". Frank Bures, Dept. of Chemistry, University of T

server reached --max-clients setting

on a Quad Opteron server processing some 20k messages a day? Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=Frank+Bures -BEGIN PGP SIGNATURE- Version:

Merging Bayes database on a single system

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Due to unfortunate typo, several Bayes databases were created on my system. I am running central Bayes database but now I have another one for the last two days. Is there a way how to import that database into the main one? Thanks Frank Bures

Re: SA ignores mail from outside of the domain

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just for the records. I found the problem. Typo in SWITCHRC statement in /etc/procmailrc Thanks for the help. Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http

Re: SA ignores mail from outside of the domain

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 05 Jan 2006 12:08:53 -0600, Gregory P. Ennis wrote: >On Thu, 2006-01-05 at 11:31 -0500, Frank Bures wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> On Thu, 05 Jan 2006 09:40:27 -0600, Gregory P.

Re: SA ignores mail from outside of the domain

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 05 Jan 2006 09:40:27 -0600, Gregory P. Ennis wrote: >On Thu, 2006-01-05 at 10:32 -0500, Frank Bures wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> On Thu, 5 Jan 2006 07:11:42 -0800, Loren Wilton

Re: SA ignores mail from outside of the domain

sassin -D', it works. I have basically just :0fw | /usr/bin/spamc in $HOME/.procmailrc and the procmail is running fine (it has been for years). Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:

Re: SA ignores mail from outside of the domain

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 05 Jan 2006 07:32:55 -0500 (EST), Frank Bures wrote: >I am testing SA for several test users on my mail server. > >Everything was going OK when suddenly SA started to ignore any mail coming >outside of my own domain. So any m

SA ignores mail from outside of the domain

any mails coming from outside do not. As I am relatively new to SA, I have no idea where to look. Any advice would be greatly appreciated. Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/

Re: Scoring for MAPS

at MTA level. My opinion ;-) Good point! Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=Frank+Bures -BEGIN PGP SIGNATURE- Version: PGPfreeware 5.0

Scoring for MAPS

recommended scoring settings for RCVD_IN_MAPS_* ? Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca PGP public key: http://pgp.mit.edu:11371/pks/lookup?op=index&search=Frank+Bures -BEGIN PGP SIGNATURE- Version: PGPfree