-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello John,

Saturday, November 22, 2003, 7:56:07 PM, you wrote:

RM>> 1) The Swen virus is not spam. It should be caught by anti-virus
RM>> software, not by anti-spam software. 

JO> It's email that I don't want.  It has a predictable From: and/or
JO> Subject: and so should be able to be scored very high.

Understandable.  Both sets of statements are true, yours and mine.
Remember, though, that SA aims at **spam**, not at viruses. Per my last
comment in the last email, several of us are quite successful at catching
viruses with SA, but it's work, because that's not SA's primary purpose.

RM>> Do you have the default network tests turned on?  They are VERY
RM>> useful in catching spam which otherwise scores very low against the
RM>> default rule set.  

JO> Apparently not.  It looks to me like something has to be done other
JO> than install SA to make them go, and I'm working on figuring that out
JO> now... :-)

See the NETWORK TEST OPTIONS section of
http://www.spamassassin.org/doc/Mail_SpamAssassin_Conf.html

More than that I can't help you, since I have no access to that level of
SA installation here.

>> Do you have Bayes turned on? Bayes is a life saver here.

JO> I have no idea.  How would I know?

1) Check the headers of emails processed by SA. If they include an
autolearn=(no, or ham, or spam), then I believe Bayes is turned on.

2) Check your config file(s). Do you have a use_bayes parameter? 1 is on
(default), 0 is off.

3) Check for Bayes database files created on your system (named bayes_*).
These would indicate that Bayes is attempting to learn about spam and ham
on your system.

>> Have you adjusted any of the default scores?  Check out my new page at
>> http://www.exit0.us/index.php/RM_DefaultScoreChanges -- if you can't
>> target Swen using an anti-virus program, check out the
>> MICROSOFT_EXECUTABLE rule and score -- I have this set to 15.00, and
>> it catches all live viruses (those with active and executable
>> components).  

JO> I'll look into that... thanks for the link.

Good luck. Have fun. This is war (against the spammers), but that doesn't
mean we can't enjoy ourselves while fighting the good fight.

Bob Menschel

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBP8BUEpebK8E4qh1HEQJDqACfSBmuo0g3mugKul7ynKl0A/SKG9QAoJUx
zZzuGmpHOMS1A3mODXyLMw8v
=2LL5
-----END PGP SIGNATURE-----




-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to