> -----Original Message-----
> From: Steve Schofield
> Sent: Tuesday, May 27, 2003 8:27 PM
>
> If I may ask, is this in a user_pref for a specific user or domain wide?
> Where is the conf file at?

I've been running the experiments in my own account, working from a spam
sample that I'd saved off from a place where I've been collecting incoming
spam. But these tests really don't have anything to do with local_prefs,
because the actual handling of spam mails is done in the procmailrc file.
In a system-wide configuration the common procmail handling could live
in /etc/procmailrc. Basically, I was just experimenting with seeing how
well SA can do when it is fed only part of a large message. The answer
is that it does real well, if fed part of both the beginning of the
message, and the end - but it doesn't do that well if only fed the
beginning of the message, which is currently the behavior of
"spamc -s msg_size".

I just ran a test using a 2000 byte limit on message size: If the
message size is over 2000, concatenate the first 1000 bytes to the last 1000
bytes and feed that to SA. This turned out to generate a small number of
unexpected false negatives. To be exact, the baseline case had 399 false
negatives (due to using only local rules and no auto-white-listing), but
by truncating to 2000 byte messages we generated 7 additional falso
negatives.
That number, 7 out of 1545, isn't huge, but is noticeable. I dislike it
when any spam sneaks through. Not giving up, I'm going to try using the
first third, middle third, and last third, and see how it goes. :).




-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to