thanks Robert...

> And don't worry about the ratio -- I feed Bayes spam/ham in a 10:1
ratio, and it's working wonderfully.

ok.. unfortunately i have to report that for me there isn't much
difference. overnight i got 88 messages in my mailbox. 72 of them were
spam - not detected by sa. in the same period of time there were about 100
- 110 messages correctly tagged as spam. so it's more like 60% of the spam
gets stopped and the rest goes through undetected.
i guess it's still not working correctly....
when i first fed the spam and ham i used messages that were sent directly
to my account. i was expecting much higher rate of spam detection.

i'm experimenting with a vpopmail set up. here are the db permissions:
-rw-r-----   1 root  vchkpw   688128 Jan 11 16:01 bayes_seen
-rw-r-----   1 root  vchkpw  5439488 Jan 11 16:01 bayes_toks
where vchkpw is the vpopmail group.

maybe i'm still doing something wrong...

here is my own user-prefs and below i have examples of X headers of
detected spam and spam that got through:

required_hits   3.00
rewrite_header Subject  [SPAM]
bayes_path      /var/spamdb/bayes
defang_mime     0
use_terse_report        1

(i realize defang_mime and use_terse_report are old directives but i
figured they wont hurt the process - do they?!)


score   ADVERT_CODE     2.00
score   BILL_1618       3.00
score   DATE_IN_PAST_03_06      3.00
score   FORGED_YAHOO_RCVD       3.00
score   INCREASE_SALES  4.00
score   MIME_EXCESSIVE_QP       3.00
score   MONEY_BACK      1.00
score   MORTGAGE_RATES  5.00
score   MSGID_CHARS_WEIRD       3.00
score   MSG_ID_ADDED_BY_MTA     3.00
score   MSG_ID_ADDED_BY_MTA_2   3.00
score   OFFER   3.00
score   ORDER_NOW       3.00
score   PENIS_ENLARGE   5.00
score   PORN_12 5.00
score   PORN_4  3.00
score   SAVE_MONEY      3.00
score   SMTPD_IN_RCVD   3.00
score   SUBJ_MISSING    3.00
score   VIAGRA  5.00
score   WANTS_CREDIT_CARD       3.00


also there is a bunch of white and black listed domains..


headers of spam that GOT THROUGH:

X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on chavo.el.net
X-Spam-Level: **
X-Spam-Status: No, score=2.8 required=3.0 tests=HELO_DYNAMIC_DHCP,
      HELO_DYNAMIC_IPADDR autolearn=no version=3.0.2


X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on chavo.el.net
X-Spam-Level: **
X-Spam-Status: No, score=2.7 required=3.0 tests=DRUGS_ERECTILE,
      DRUGS_ERECTILE_OBFU,HELO_DYNAMIC_DIALIN,RCVD_ILLEGAL_IP autolearn=no
version=3.0.2


this is DETECTED SPAM:

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on chavo.el.net
X-Spam-Level: ****
X-Spam-Status: Yes, score=4.0 required=3.0 tests=HELO_DYNAMIC_COMCAST,
      INFO_TLD autolearn=no version=3.0.2
MIME-Version: 1.0


X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on chavo.el.net
X-Spam-Level: ****
X-Spam-Status: Yes, score=4.6 required=3.0 tests=DATE_IN_FUTURE_12_24,
      DRUGS_ERECTILE,DRUGS_PAIN,FORGED_HOTMAIL_RCVD,MIME_BASE64_TEXT
      autolearn=no version=3.0.2

note that the ones that were detected scored 4 - lower than the actual
default of the recomended 5....

i'd really appreciate any help to make sa detect at least 90% of incoming
spam...

thank you...


Reply via email to