Re: Bayes became to work very bad

2007-06-21 Thread Roman Sozinov
Matthias Haegele-2 wrote: > > Use blacklists, the botnet plugin, SARE rules, sa-update ...? > upgrade to a newer SA release? > Thanks :) What about my BAYES base? delete it? Do it from new? -- View this message in context: http://www.nabble.com/Bayes-became-to-work-very-bad-tf3958378.html#a1

Re: Bayes became to work very bad

2007-06-21 Thread Roman Sozinov
jean-philippe luiggi-2 wrote: > > Hello Roman, > > It's not a problem with SA but with the bayes's concept instead. > Keeping an "big" but "old" bayes's database doesn't mean > you'll catch the new spam. > Each day, spammers change them in order to evade detection so in > order to be as accura

Re: Bayes became to work very bad

2007-06-21 Thread Roman Sozinov
Matthias Haegele-2 wrote: > > You use sa-learn till now?. Some people suggest not to learn old > spam/ham ... > Think its pretty normal that bayes hits are not very good on new spam > (spammer tweak their messages every day to slip the filters ...). > Some new spam messages here only get BAYES

Bayes became to work very bad

2007-06-21 Thread Roman Sozinov
I'm using spamassassin about 1 year and for that period I already have good BAYES tokens base. But about 2 weaks ago began something wrong - my system became to catch spam very bad. About 80% of spam have BAYES_50 score :( What's wrong? I'm using Spamassassin 3.1.8 with mysql backend (awl & bayes

Re: R: R: AWL and whitelists

2006-10-28 Thread Roman Sozinov
Giampaolo Tomassoni wrote: > >> >> In awl row: email|62.234|1|1.109 (e-mail|ip|count|score) >> >> Something strange: count is 1 still and score has become 1.109 :( >> > >> > What happened to the email|none row? Is it still there? >> > >> Yes it still there: >> email|62.234|1|1.109 (e-mail|ip

Re: Per Domain Whitelisting

2006-10-28 Thread Roman Sozinov
Daryl C. W. O wrote: > > Of course it does. It supports per user preferences, so if you pass > nothing but domain names it thus supports per domain preferences. > What about dynamic whitelists (i suppose don't use .cf files)? Is it possible to add/delete some value to whitelist/black in wor

Re: Per Domain Whitelisting

2006-10-27 Thread Roman Sozinov
Peter H. Lemieux wrote: > > jasonegli wrote: >> For example let's say that domain xyz.com wants to allow all messages >> from >> yahoo.com, but domain 123.com does not. Is there a way to allow "FROM >> [EMAIL PROTECTED] TO [EMAIL PROTECTED]"? > > Obtuse SMTPD (http://sd.inodes.org/) can handle

Re: using --add-to-blacklist feature of spamassassin

2006-10-27 Thread Roman Sozinov
ankush grover-6 wrote: > > hey friends, > > I am using SA 3.1.3 on FC3 with Postfix. I tried the > --add-to-blacklist feature of spamassassin. > > spamassassin --add-to-blacklist /home/testing/Maildir/.spam/cur/ > SpamAssassin auto-whitelist: adding address to blacklist: > [EMAIL PROTECTED]

Re: R: AWL and whitelists

2006-10-27 Thread Roman Sozinov
Giampaolo Tomassoni wrote: > >> 2. I do first test check: >> cat test-email | spamc -R >> Content analysis details: (-49.4 points, 5.0 required) >> pts rule name description >> -- >> -- >> 0.6 HTML_SHOR

AWL and whitelists

2006-10-27 Thread Roman Sozinov
Hi all! I don't understand something in AWL working and want somebody clears it for me. I know that AWL is a score averaging system and it's bad idia to use it as whitelist, but there is possibility --add-to-whitelist(-W) to add e-mail to AWL with -100 score. This possibility works very strange.