Re: SA experts needed here - SPAM examples

2008-06-17 Thread Benny Pedersen
On Tue, June 17, 2008 19:30, Ralf Hildebrandt wrote: >> May I know how I can allow pop3/smtp authenticated connections from > What does POP3 have to do with SMTP? might be pop before smtp (problem in its own, in that it does not handle NAT very well) ? >> internet at large while keeping this li

RE: SA experts needed here - SPAM examples

2008-06-17 Thread NGSS
Thanks for all your helps. Appreciated. From: Jari Fredriksson [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2008 12:56 PM To: NGSS; users@spamassassin.apache.org Cc: [EMAIL PROTECTED] Subject: Re: SA experts needed here - SPAM examples > Hi Jari, > This is impressive! I am impres

RE: SA experts needed here - SPAM examples

2008-06-17 Thread NGSS
HI David, The server is running on latest qmail-toaster's bundle. It is a smtp-auth. -Original Message- From: David B Funk [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2008 5:55 AM To: users@spamassassin.apache.org Cc: NGSS Subject: Re: SA experts needed here - SPAM example

Re: SA experts needed here - SPAM examples

2008-06-17 Thread David B Funk
On Tue, 17 Jun 2008, Ralf Hildebrandt wrote: > * NGSS <[EMAIL PROTECTED]>: > > Hi Ralf, > > Thanks for the response. > > > May I know how I can allow pop3/smtp authenticated connections from > > What does POP3 have to do with SMTP? At a guess, he's using the old POP before SMTP kluge rather than

Re: SA experts needed here - SPAM examples

2008-06-17 Thread Ralf Hildebrandt
* NGSS <[EMAIL PROTECTED]>: > Hi Ralf, > Thanks for the response. > May I know how I can allow pop3/smtp authenticated connections from What does POP3 have to do with SMTP? > internet at large while keeping this line "-r zen.spamhaus.org" in the > /var/qmail/control/blacklists ? I have no idea,

RE: SA experts needed here - SPAM examples

2008-06-17 Thread NGSS
t: Tuesday, June 17, 2008 4:20 PM To: users@spamassassin.apache.org Subject: Re: SA experts needed here - SPAM examples * NGSS <[EMAIL PROTECTED]>: > Hi John > I afraid I had move the ling "-r zen.spamhaus.org" from the > /var/qmail/control/blacklists . > Because with

RE: SA experts needed here - SPAM examples

2008-06-17 Thread John Hardin
On Wed, 18 Jun 2008, NGSS wrote: It required authentication for external connections so it is not an open-relay. Good. So you meant I am doing the right thing by removing the line from /var/qmail/control/blacklists ? No, I think you *should* have the zen blacklist in use. If using it is i

RE: SA experts needed here - SPAM examples

2008-06-17 Thread NGSS
PM To: NGSS Cc: 'SpamAssassin Users List'; [EMAIL PROTECTED] Subject: RE: SA experts needed here - SPAM examples On Tue, 17 Jun 2008, NGSS wrote: > I afraid I had move the ling "-r zen.spamhaus.org" from the > /var/qmail/control/blacklists . > Because with this lin

RE: SA experts needed here - SPAM examples

2008-06-17 Thread John Hardin
On Tue, 17 Jun 2008, John Hardin wrote: There is your problem right there. Bayes will not start classifying messages until you have taught at least 100 each of ham and spam. Make that 200. D'oh! -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FA

RE: SA experts needed here - SPAM examples

2008-06-17 Thread John Hardin
On Tue, 17 Jun 2008, NGSS wrote: I afraid I had move the ling "-r zen.spamhaus.org" from the /var/qmail/control/blacklists . Because with this line is in, I can't perform send/receive from most of the external network using my Outlook. Is that what you talking about? DNSBL tests should not be

RE: SA experts needed here - SPAM examples

2008-06-17 Thread John Hardin
On Tue, 17 Jun 2008, NGSS wrote: I quite sure that the script is running and the variable in $DOMAIN and $SPAM are correct ( I defined it early in the script, which are not shown here) because the I got a copy for each them in $DIRCOLLECTSPAM and nothing in the learning folder, /home/vpopmail/do

Re: SA experts needed here - SPAM examples

2008-06-17 Thread Ralf Hildebrandt
* NGSS <[EMAIL PROTECTED]>: > Hi John > I afraid I had move the ling "-r zen.spamhaus.org" from the > /var/qmail/control/blacklists . > Because with this line is in, I can't perform send/receive from most of the > external network using my Outlook. Is that what you talking about? That's a clear ca

Re: SA experts needed here - SPAM examples

2008-06-17 Thread Anthony Peacock
NGSS wrote: Hi John I quite sure that the script is running and the variable in $DOMAIN and $SPAM are correct ( I defined it early in the script, which are not shown here) because the I got a copy for each them in $DIRCOLLECTSPAM and nothing in the learning folder, /home/vpopmail/domains/$DOMAIN/

Re: SA experts needed here - SPAM examples

2008-06-16 Thread Jari Fredriksson
> Hi Jari, > This is impressive! I am impressed by the high score it > got from your machine's analysis. I think this is what I > am looking for. > The lowest score among the rule is 0.9, it is well way of > my 0.1 total score. I think I really missed out quite a > few things. May I know where I

RE: SA experts needed here - SPAM examples

2008-06-16 Thread NGSS
om: John Hardin [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2008 5:37 AM Cc: NGSS; SpamAssassin Users List Subject: Re: SA experts needed here - SPAM examples >> http://www.keac.com/id3303/spam-egs.txt > > 3.0 RCVD_IN_XBLRBL: Received

RE: SA experts needed here - SPAM examples

2008-06-16 Thread NGSS
AM To: NGSS Cc: users@spamassassin.apache.org; [EMAIL PROTECTED] Subject: RE: SA experts needed here - SPAM examples On Tue, 17 Jun 2008, NGSS wrote: > HI, > Thanks for the response. > > May I know how I can capture the output of the sa trainer ? Well, if you're running the

RE: SA experts needed here - SPAM examples

2008-06-16 Thread NGSS
r the ruleset? Do I require additional plugins ? I am using the defaults plugins set from Qmail-toaster cnt50 . From: Jari Fredriksson [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2008 5:07 AM To: NGSS; users@spamassassin.apache.org Cc: [EMAIL PROTECTED] Subject: Re: SA experts needed

Re: SA experts needed here - SPAM examples

2008-06-16 Thread Chris
On Monday 16 June 2008 1:42 pm, NGSS wrote: > Hi, > > I am losing confident in SA, the training process is pretty slow or it > doesn't seem to be learning. > I've taken each of your spam and run them through my home setup. Note, I don't run a server and a "sa-learn --dump magic shows: 147521

Re: SA experts needed here - SPAM examples

2008-06-16 Thread Chris
On Monday 16 June 2008 2:23 pm, NGSS wrote: > HI, > Thanks for the response. > > May I know how I can capture the output of the sa trainer ? I using the > follow script to do training, > > cd /home/vpopmail/domains/$DOMAIN/$SPAM/Maildir/cur > /usr/bin/sa-learn --spam ./* > cp -a /home/vpopmail/doma

Re: SA experts needed here - SPAM examples

2008-06-16 Thread John Hardin
http://www.keac.com/id3303/spam-egs.txt 3.0 RCVD_IN_XBLRBL: Received via a relay in Spamhaus XBL [68.243.81.116 listed in zen.spamhaus.org] Indeed. Suggestion: put zen.spamhaus.org in your MTA's DNSBL list. That's a reliable BL and should be part of you

Re: SA experts needed here - SPAM examples

2008-06-16 Thread Jari Fredriksson
> Hi, > I am losing confident in SA, the training process is > pretty slow or it doesn't seem to be learning. > I am training SA with around 30-50 manually identified > spam (moving spam mails to and spam folder created in > squirrelmail and crond the sa-train command on that > folder every hour

Re: SA experts needed here - SPAM examples

2008-06-16 Thread Matthias Leisi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 NGSS schrieb: | I am losing confident in SA, the training process is pretty slow or it | doesn?t seem to be learning. I don't think training is your first and foremost problem. It seems that you are not running network tests [1] (esp. RBLs), whic

RE: SA experts needed here - SPAM examples

2008-06-16 Thread John Hardin
On Tue, 17 Jun 2008, NGSS wrote: HI, Thanks for the response. May I know how I can capture the output of the sa trainer ? Well, if you're running the script from cron, stdout and stderr should automatically be emailed to the owner of the cron job - unless you are explicitly redirecting that

Re: SA experts needed here - SPAM examples

2008-06-16 Thread John Hardin
On Mon, 16 Jun 2008, Evan Platt wrote: I could be wrong, but I believe for the learning process to be useful, you also need to learn HAM. (IIRC, an equal amount of each.) Minimum 100 of each spam and ham. The balance should ideally reflect your actual ham/spam balance. -- John Hardin KA7

RE: SA experts needed here - SPAM examples

2008-06-16 Thread NGSS
the same script which section is not shown here . -Original Message- From: John Hardin [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2008 2:54 AM To: NGSS Cc: users@spamassassin.apache.org; [EMAIL PROTECTED] Subject: Re: SA experts needed here - SPAM examples On Tue, 17 Jun 2008, NGSS

Re: SA experts needed here - SPAM examples

2008-06-16 Thread Evan Platt
I could be wrong, but I believe for the learning process to be useful, you also need to learn HAM. (IIRC, an equal amount of each.) Evan NGSS wrote: Hi, I am losing confident in SA, the training process is pretty slow or it doesn’t seem to be learning. I am training SA with around 30-50

Re: SA experts needed here - SPAM examples

2008-06-16 Thread John Hardin
On Tue, 17 Jun 2008, NGSS wrote: I am training SA with around 30-50 manually identified spam (moving spam mails to and spam folder created in squirrelmail and crond the sa-train command on that folder every hour to train and delete them). I would suggest hourly is too often (but that may be pe

Re: SA experts needed here - SPAM examples

2008-06-16 Thread Richard Frovarp
NGSS wrote: Hi, I am losing confident in SA, the training process is pretty slow or it doesn’t seem to be learning. I am training SA with around 30-50 manually identified spam (moving spam mails to and spam folder created in squirrelmail and crond the sa-train command on that folder every

SA experts needed here - SPAM examples

2008-06-16 Thread NGSS
Hi, I am losing confident in SA, the training process is pretty slow or it doesn't seem to be learning. I am training SA with around 30-50 manually identified spam (moving spam mails to and spam folder created in squirrelmail and crond the sa-train command on that folder every hour to train and d