Debian Testing/Sarge Spamassassin 2.61 I use fetchmail to get mail from my ISP, then procmail calls spamassassin using system wide settings and delivers to two local users; Me and Mrs Me.
I'm struggling a little getting my head around blacklists and autolearning. I have a few email addresses that get nothing but spam so I thought I'd set them up in /etc/spamassassin/local.cf as entries beginning 'blacklist_to' - so for instance a section of it looks like: blacklist_to [EMAIL PROTECTED] blacklist_to [EMAIL PROTECTED] blacklist_to [EMAIL PROTECTED] blacklist_to [EMAIL PROTECTED] fetchmail delivers mail to a local user 'postie', who has a .procmailrc that looks along the lines of: :0fw | spamassassin -a :0 c ! spamtest :0 * ^X-Spam-Flag: YES spam :0 * ^X-Spam-Status: Yes spam :0 c ! dougie :0 ! roberta I'm currently using the user 'spamtest' as a check to ensure that I'm not getting false positives and to look at the headers of the spam. The headers look pretty much as I hoped except that the autolearn is often equal to 'no' when, for a blacklisted address, I thought, or hoped, or want it to be, autolearn=spam. e.g. Here's a recent one: To: <[EMAIL PROTECTED]> Subject: There rpxg Date: Sat, 03 Jan 2004 15:08:53 -0600 Message-Id: <[EMAIL PROTECTED]> X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on nick.homelan X-Spam-Level: ************* X-Spam-Status: Yes, hits=13.3 required=5.0 tests=BAYES_50,HTML_50_60, HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_UNSAFE,HTML_IMAGE_ONLY_04, HTML_MESSAGE,MIME_BASE64_TEXT,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY, USER_IN_BLACKLIST_TO autolearn=no version=2.61 To: <[EMAIL PROTECTED]> Subject: There rpxg Date: Sat, 03 Jan 2004 15:08:53 -0600 Message-Id: <[EMAIL PROTECTED]> X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on nick.homelan X-Spam-Level: ************* X-Spam-Status: Yes, hits=13.3 required=5.0 tests=BAYES_50,HTML_50_60, HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_UNSAFE,HTML_IMAGE_ONLY_04, HTML_MESSAGE,MIME_BASE64_TEXT,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY, USER_IN_BLACKLIST_TO autolearn=no version=2.61 Digging around in the documentation I find that my debian installation is pretty bare in /etc/spamassassin, containing: [EMAIL PROTECTED]:/home/postie# ls -tlr /etc/spamassassin/ total 8 -rw-r--r-- 1 root root 1123 May 23 2003 user_prefs.template -rw-r--r-- 1 root root 2310 Dec 29 16:18 local.cf local.cf contains my whitelist and blacklist entries. The template files seem to be in /usr/share/spamassassin, and looking in there at 50_scores.cf I can see two mentions of blacklists: score USER_IN_BLACKLIST 100.000 score USER_IN_WHITELIST -100.000 score USER_IN_DEF_WHITELIST -15.000 score USER_IN_BLACKLIST_TO 10.000 My first question is, what's the difference between USER_IN_BLACKLIST_TO, and USER_IN_BLACKLIST? Going from the score of the example spam above (13.3) I'm guessing that it was scored with 10 for it being USER_IN_BLACKLIST_TO. Since I know it's spam, I really want to make it a much higher score - how can I mark it as USER_IN_BLACKLIST? Is it just a case of changing the local.cf entry from blacklist_to to blacklist? Browsing through recent posting to this list, am I right in assuming that there is a score threshold before a mail is autolearned as spam? I am trying very hard to RTFMs, but they are scattered far and wide across the system and I'm struggling to find the answers to those questions. Thanks for your help, Dougie ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
