We created 2 mailboxes on our Notes server called SpamCollector and HamCollector.

We then set up an Agent in the template that added an action to move selected untagged spam to the Spam Collector mailbox and copy the selected HAM messages to the Ham collector mailbox.

I created a bash script on my FreeBSD box that is running SA to log into the different accounts via POP3 to the spamd account on the SA box and then runs the learn process.

It works pretty slick.

You have to setup an agent to move or copy the messages to the databases instead of forwarding them otherwise you lose the headers.

I can provide some code if you want. We are on Notes 6.5 and Domino 6.0.

--Mike

[EMAIL PROTECTED] wrote:
Help...  I need to feed spam and ham to sa-learn.  We are using lotus notes
R5 and I need to get the messages into a format that sa-learn can use.  The
closest I have found is to export messages as "structured text", and this
exports multiple messages as one file, the example below is how they are
exported...  Is this usable by sa-learn?  Any suggestions?  Thanks for the
advice.

************************************************************************************************************************************************************************************

Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009223223:23490 ;          Thu, 20 Jan 2005 09:22:32 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 110623455278; Thu, 20 Jan 2005
09:22:32 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
01B1A11447; Thu, 20 Jan 2005 09:22:31 -0600 (CST)
Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
smtp.transplace.com (Postfix) with SMTP id D786E1146A for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:22:30 -0600 (CST)
Received:  (qmail 19329 invoked by uid 500); 20 Jan 2005 15:22:09 -0000
Mailing_List:  contact [EMAIL PROTECTED]; run by ezmlm
Precedence:  bulk
list_help:  <mailto:[EMAIL PROTECTED]>
list_unsubscribe:  <mailto:[EMAIL PROTECTED]>
list_post:  <mailto:users@spamassassin.apache.org>
List_Id:  <users.spamassassin.apache.org>
Delivered_To:  mailing list users@spamassassin.apache.org
Received:  (qmail 19226 invoked by uid 99); 20 Jan 2005 15:22:08 -0000
X_ASF_Spam_Status:  No, hits=0.0 required=10.0
tests=HTML_60_70,HTML_MESSAGE
X_Spam_Check_By:  apache.org
Received_SPF:  pass (hermes.apache.org: local policy)
Received:  from mail.lastar.com (HELO server11.lastar.com) (65.89.139.10)
by apache.org (qpsmtpd/0.28) with SMTP; Thu, 20 Jan 2005 07:22:06 -0800
Received:  from spamfilter.lastar.com ([192.168.70.12]) by
server11.lastar.com (SMSSMTP 4.0.0.59) with SMTP id M2005012010220301455
for <users@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500
Received:  from localhost (localhost [127.0.0.1])     by
spamfilter.lastar.com (Postfix) with ESMTP id 9845CEFCE4    for
<users@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
Received:  from spamfilter.lastar.com ([127.0.0.1]) by localhost
(spamfilter [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31569-10
for <users@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
Received:  from server24.ctg.com (server24.ctg.com [192.168.74.10])     by
spamfilter.lastar.com (Postfix) with ESMTP id 58550EFCE0    for
<users@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
X_MimeOLE:  Produced By Microsoft Exchange V6.5.7226.0
MIME_Version:  1.0
Subject:  Testing a message
PostedDate:  01/20/2005 09:22:02 AM
$MessageID:  <[EMAIL PROTECTED]>
X_MS_Has_Attach:
X_MS_TNEF_Correlator:
Thread_Topic:  Testing a message
Thread_Index:  AcT/A8r1xq4Lq9KHR4yEJ+GLien6cQ==
From:  "Jason Gauthier" <[EMAIL PROTECTED]>
SendTo:  "SPAMASSASSIN" <users@spamassassin.apache.org>
X_Virus_Scanned:  amavisd-new at lastar.com
X_Virus_Checked:  Checked
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.8 required=4.0 tests=AWL,BAYES_00,HTML_MESSAGE
autolearn=ham version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:22:32 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:21 AM
SMTPOriginator:
[EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:22:32 AM-01/20/2005 09:22:32 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:22:32 AM

Greetings!

  I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
A message came in that was not spam that got blocked.  I took it to
sa-learn and learned it as ham.

I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?

Jason



Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009323090:24101 ;          Thu, 20 Jan 2005 09:32:30 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 1106235150878; Thu, 20 Jan
2005 09:32:30 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
AE2DD11480; Thu, 20 Jan 2005 09:32:30 -0600 (CST)
Received:  from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
[134.130.3.130])  by smtp.transplace.com (Postfix) with ESMTP id A0F3E11447
for <[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:32:28 -0600 (CST)
Received:  from r220-1 (r220-1.rz.RWTH-Aachen.DE [134.130.3.31]) by
ms-dienst.rz.rwth-aachen.de (iPlanet Messaging Server 5.2 HotFix 1.12
(built Feb 13 2003)) with ESMTP id
<[EMAIL PROTECTED]> for
[EMAIL PROTECTED]; Thu, 20 Jan 2005 16:28:26 +0100 (MET)
Received:  from relay.rwth-aachen.de ([134.130.3.1])  by r220-1
(MailMonitor for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:26:51 +0100 (MET)
Received:  from hermes.rz.rwth-aachen.de (hermes.rz.RWTH-Aachen.DE
[134.130.4.36])   by relay.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id
j0KFQdUJ001781; Thu, 20 Jan 2005 16:26:39 +0100 (MET)
Received:  from [134.130.4.36] (localhost [127.0.0.1])      by
hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with ESMTP id
j0KFHElg012554; Thu, 20 Jan 2005 16:20:48 +0100 (CET)
Received:  from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
[134.130.3.130])  by hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with
ESMTP id    j0KFHBle012550 for <[EMAIL PROTECTED]>; Thu, 20 Jan
2005 16:17:11 +0100 (CET)
Received:  from circe (circe.rz.RWTH-Aachen.DE [134.130.3.36])    by
ms-dienst.rz.rwth-aachen.de   (iPlanet Messaging Server 5.2 HotFix 1.12
(built Feb 13 2003))    with ESMTP id
<[EMAIL PROTECTED]> for
[EMAIL PROTECTED] (ORCPT [EMAIL PROTECTED]); Thu,
20 Jan 2005 16:17:10 +0100 (MET)
Received:  from relay2.rwth-aachen.de ([134.130.3.6]) by circe (MailMonitor
for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:17:09 +0100 (MET)
Received:  from smtps-vbr2.xs4all.nl (smtps-vbr2.xs4all.nl [194.109.24.18])
by relay2.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id j0KFH7st023252
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)     for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 16:17:07 +0100 (MET)
Received:  from isop10 (velvet.isolution.nl [194.109.164.102])
(authenticated bits=0)  by smtps-vbr2.xs4all.nl (8.12.11/8.12.11) with
ESMTP id j0KFH715004012 for <[EMAIL PROTECTED]>; Thu, 20 Jan
2005 16:17:07 +0100 (CET envelope-from [EMAIL PROTECTED])
PostedDate:  01/20/2005 09:16:57 AM
Principal:  "Ruud H.G. van Tol" <[EMAIL PROTECTED]>
Subject:  Re: Variable names
From:  [EMAIL PROTECTED]
SendTo:  "[procmail]" <[EMAIL PROTECTED]>
Errors_To:  [EMAIL PROTECTED]
$MessageID:  <[EMAIL PROTECTED]>
Organization:  Chaos rules.
MIME_Version:  1.0
X_MimeOLE:  Produced By Microsoft MimeOLE V6.00.2800.1441
$Mailer:  Microsoft Outlook Express 6.00.2800.1437
DeliveryPriority:  N
X_MSMail_Priority:  Normal
Precedence:  list
X_BeenThere:  [EMAIL PROTECTED]
X_Virus_Scanned:  by XS4ALL Virus Scanner
References:  <[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
X_Mailman_Version:  2.1.5
list_post:  <mailto:[EMAIL PROTECTED]>
List_Subscribe:  <http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
<mailto:[EMAIL PROTECTED]>
list_unsubscribe:
<http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
<mailto:[EMAIL PROTECTED]>
List_Archive:  <http://mailman.RWTH-Aachen.de/pipermail/procmail>
list_help:  <mailto:[EMAIL PROTECTED]>
List_Id:  discussion of the procmail program
<procmail.lists.RWTH-Aachen.DE>
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
      version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:32:30 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:21 AM
SMTPOriginator:  [EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:32:30 AM-01/20/2005 09:32:31 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:32:31 AM

Toen wij NM Public kietelden, kwam er dit uit:


Does anyone know if there are any
conventions for naming user-defined procmail variables?


I (try to) follow a namespace-approach. Inside abc.inc
I use abc_Varname for variables.

At the end of abc.inc I (should) unset all variables
that have no business outside abc.inc.

I sometimes used double underscore for locals, so
abc__Varname, but than an abc_Varname could also exist
and that would be a new source of problems. An
alternative would be abc_LOC_Varname.


Inside .procmailrc, the special 'PM_' prefix could be chosen. And 'H_' for values derived from Headers, 'B_' for body-vars, 'G_' for common globals.

Some often used variables should stay as they are, like
SPC, TAB, WSP (the one without []), NL, and such.



Or for
user-defined variables in the Unix world in general?


Both perl and PHP have namespaces. That helps a lot.

In a new procmail, we could have real namespaces, like
namespace.Varname. And multiple matches, like MATCH1..
MATCHn. And, and, ...

--
Grtz, Ruud

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
[EMAIL PROTECTED]
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail



Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009333540:24187 ;          Thu, 20 Jan 2005 09:33:35 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 1106235214958; Thu, 20 Jan
2005 09:33:34 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
D720B11481; Thu, 20 Jan 2005 09:33:34 -0600 (CST)
Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
smtp.transplace.com (Postfix) with SMTP id E49C811485 for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:33:33 -0600 (CST)
Received:  (qmail 54834 invoked by uid 500); 20 Jan 2005 15:33:25 -0000
Mailing_List:  contact [EMAIL PROTECTED]; run by ezmlm
Precedence:  bulk
list_help:  <mailto:[EMAIL PROTECTED]>
list_unsubscribe:  <mailto:[EMAIL PROTECTED]>
list_post:  <mailto:users@spamassassin.apache.org>
List_Id:  <users.spamassassin.apache.org>
Delivered_To:  mailing list users@spamassassin.apache.org
Received:  (qmail 54818 invoked by uid 99); 20 Jan 2005 15:33:25 -0000
X_ASF_Spam_Status:  No, hits=1.8 required=10.0
tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
X_Spam_Check_By:  apache.org
Received_SPF:  pass (hermes.apache.org: local policy)
Received:  from rwcrmhc11.comcast.net (HELO rwcrmhc11.comcast.net)
(204.127.198.35)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:33:23 -0800
Received:  from mk.comcast.net
(pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84])          by
comcast.net (rwcrmhc11) with SMTP          id <200501201533200130090j09e>;
Thu, 20 Jan 2005 15:33:21 +0000
$MessageID:  <[EMAIL PROTECTED]>
$Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
PostedDate:  01/20/2005 09:33:22 AM
SendTo:  "Jason Gauthier" <[EMAIL PROTECTED]>,"SPAMASSASSIN"
<users@spamassassin.apache.org>
From:  Matt Kettler <[EMAIL PROTECTED]>
Subject:  Re: Testing a message
In_Reply_To:  <[EMAIL PROTECTED]>
References:  <[EMAIL PROTECTED]>
MIME_Version:  1.0
X_Virus_Checked:  Checked
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
      version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:33:35 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
[EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:33:35 AM-01/20/2005 09:33:35 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:33:35 AM

At 10:22 AM 1/20/2005, Jason Gauthier wrote:

 I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
A message came in that was not spam that got blocked.  I took it to
sa-learn and learned it as ham.

I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?


pipe it through the spamassassin command line:

spamassassin <message.txt

Optionaly you can add the -t parameter to force SA to generate a spam
report, even if it's below the threshold (helpful to see all the rules).

Note: Make sure that sa-learn and spamassassin are being run as the same
user than amavis will access spamassassin as. Otherwise you might be using
a different bayes database (They default to being in $HOME)




Received: from p2kwshp1 ([10.67.3.129]) by psplotp1.transplace.com (Lotus Domino Release 5.0.11) with SMTP id 2005012009345142:24260 ; Thu, 20 Jan 2005 09:34:51 -0600 Received: From smtp.transplace.com ([10.67.100.156]) by p2kwshp1 (WebShield SMTP v4.5 MR1a P0803.345); id 1106235291367; Thu, 20 Jan 2005 09:34:51 -0600 Received: by smtp.transplace.com (Postfix, from userid 1035) id 44B3711481; Thu, 20 Jan 2005 09:34:51 -0600 (CST) Received: from mail.apache.org (hermes.apache.org [209.237.227.199]) by smtp.transplace.com (Postfix) with SMTP id 3C2DE11457 for <[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:34:50 -0600 (CST) Received: (qmail 58916 invoked by uid 500); 20 Jan 2005 15:34:40 -0000 Mailing_List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk list_help: <mailto:[EMAIL PROTECTED]> list_unsubscribe: <mailto:[EMAIL PROTECTED]> list_post: <mailto:users@spamassassin.apache.org> List_Id: <users.spamassassin.apache.org> Delivered_To: mailing list users@spamassassin.apache.org Received: (qmail 58903 invoked by uid 99); 20 Jan 2005 15:34:40 -0000 X_ASF_Spam_Status: No, hits=0.1 required=10.0 tests=FORGED_RCVD_HELO X_Spam_Check_By: apache.org Received_SPF: pass (hermes.apache.org: local policy) Received: from smtp-vbr2.xs4all.nl (HELO smtp-vbr2.xs4all.nl) (194.109.24.22) by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005 07:34:38 -0800 Received: from webmail.xs4all.nl (webmail7.xs4all.nl [194.109.22.167]) by smtp-vbr2.xs4all.nl (8.12.11/8.12.11) with ESMTP id j0KFYXd5063471; Thu, 20 Jan 2005 16:34:34 +0100 (CET) (envelope-from [EMAIL PROTECTED]) Received: from 80.127.176.177 by webmail.xs4all.nl with HTTP; Thu, 20 Jan 2005 16:34:34 +0100 (CET) $MessageID: <[EMAIL PROTECTED]> In_Reply_To: <[EMAIL PROTECTED]> References: <[EMAIL PROTECTED]> PostedDate: 01/20/2005 09:34:34 AM Subject: Re: Testing a message From: "Menno van Bennekom" <[EMAIL PROTECTED]> SendTo: "Jason Gauthier" <[EMAIL PROTECTED]> CopyTo: "SPAMASSASSIN" <users@spamassassin.apache.org> ReplyTo: [EMAIL PROTECTED] User_Agent: SquirrelMail/1.4.3a $Mailer: SquirrelMail/1.4.3a MIME_Version: 1.0 X_Virus_Scanned: by XS4ALL Virus Scanner X_Virus_Checked: Checked X_Spam_Checker_Version: SpamAssassin 2.63 (2004-01-11) on pfbspmp1.transplace.com X_Spam_Status: No, hits=-4.6 required=4.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X_Spam_Level: $MIMETrack: Itemize by SMTP Server on psplotp1/com(Release 5.0.11 |July 24, 2002) at 01/20/2005 09:34:51 AM,MIME-CD by Notes Client on Kyle Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22 AM,MIME-CD complete at 01/20/2005 09:44:22 AM SMTPOriginator: [EMAIL PROTECTED] $UpdatedBy: $Orig: Categories: $Revisions: RouteServers: CN=psplotp1/O=com RouteTimes: 01/20/2005 09:34:51 AM-01/20/2005 09:34:51 AM $MsgTrackFlags: 0 DeliveredDate: 01/20/2005 09:34:51 AM


Greetings!

 I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
A message came in that was not spam that got blocked.  I took it to
sa-learn and learned it as ham.

I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?

Jason

You probably did something like 'cat message | sa-learn --ham' to learn it as ham. Like that you can do 'cat message | sendmail [EMAIL PROTECTED]' to send it again. Or you can do 'cat message | spamassassin -D' to just evaluate what spamassassin would have done with the message.

Menno van Bennekom



Received:  from p2kwshp1 ([10.67.3.129])          by
psplotp1.transplace.com (Lotus Domino Release 5.0.11)          with SMTP id
2005012009351447:24295 ;          Thu, 20 Jan 2005 09:35:14 -0600
Received:  From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345);     id 1106235314196; Thu, 20 Jan
2005 09:35:14 -0600
Received:  by smtp.transplace.com (Postfix, from userid 1035)     id
121DD11460; Thu, 20 Jan 2005 09:35:14 -0600 (CST)
Received:  from mail.apache.org (hermes.apache.org [209.237.227.199])   by
smtp.transplace.com (Postfix) with SMTP id D7E7011440 for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:35:12 -0600 (CST)
Received:  (qmail 59655 invoked by uid 500); 20 Jan 2005 15:34:45 -0000
Mailing_List:  contact [EMAIL PROTECTED]; run by ezmlm
Precedence:  bulk
list_help:  <mailto:[EMAIL PROTECTED]>
list_unsubscribe:  <mailto:[EMAIL PROTECTED]>
list_post:  <mailto:users@spamassassin.apache.org>
List_Id:  <users.spamassassin.apache.org>
Delivered_To:  mailing list users@spamassassin.apache.org
Received:  (qmail 59591 invoked by uid 500); 20 Jan 2005 15:34:44 -0000
Delivered_To:  [EMAIL PROTECTED]
Received:  (qmail 59459 invoked by uid 99); 20 Jan 2005 15:34:43 -0000
X_ASF_Spam_Status:  No, hits=1.8 required=10.0
tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
X_Spam_Check_By:  apache.org
Received_SPF:  pass (hermes.apache.org: local policy)
Received:  from rwcrmhc13.comcast.net (HELO rwcrmhc13.comcast.net)
(204.127.198.39)  by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:34:43 -0800
Received:  from mk.comcast.net
(pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84])          by
comcast.net (rwcrmhc13) with SMTP          id <2005012015343501500d5spde>;
Thu, 20 Jan 2005 15:34:41 +0000
$MessageID:  <[EMAIL PROTECTED]>
$Mailer:  QUALCOMM Windows Eudora Version 6.2.0.14
PostedDate:  01/20/2005 09:34:38 AM
SendTo:  "Thomas Kinghorn [MTNNS -Rosebank]"
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>
From:  Matt Kettler <[EMAIL PROTECTED]>
Subject:  Re: Spamassassin 3.0.2 child processes
In_Reply_To:  <[EMAIL PROTECTED]
t>
References:  <[EMAIL PROTECTED]>
MIME_Version:  1.0
X_Virus_Checked:  Checked
X_Spam_Checker_Version:  SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status:  No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
      version=2.63
X_Spam_Level:
$MIMETrack:  Itemize by SMTP Server on psplotp1/com(Release 5.0.11  |July
24, 2002) at 01/20/2005 09:35:14 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
[EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers:  CN=psplotp1/O=com
RouteTimes:  01/20/2005 09:35:14 AM-01/20/2005 09:35:14 AM
$MsgTrackFlags:  0
DeliveredDate:  01/20/2005 09:35:14 AM

At 06:58 AM 1/20/2005, Thomas Kinghorn [MTNNS -Rosebank] wrote:

Is there a way to limit spamd child processes?

# ps -ef | grep spam

root 602 1 0 13:28 ? 00:00:12 /usr/bin/spamd -d -c -m5

-H

xadmin     649   602  0 13:29 ?        00:00:09 spamd child
xadmin     650   602  0 13:29 ?        00:00:07 spamd child
xadmin     651   602  0 13:29 ?        00:00:13 spamd child
root       652   602  0 13:29 ?        00:00:10 spamd child
root       653   602  0 13:29 ?        00:00:08 spamd child



Yes, with the -m parameter you are already using. You've got -m5, spamd has 5 children.. set it to -m2 and you'll get 2.




Received: from p2kwshp1 ([10.67.3.129]) by psplotp1.transplace.com (Lotus Domino Release 5.0.11) with SMTP id 2005012009354443:24330 ; Thu, 20 Jan 2005 09:35:44 -0600 Received: From smtp.transplace.com ([10.67.100.156]) by p2kwshp1 (WebShield SMTP v4.5 MR1a P0803.345); id 1106235344541; Thu, 20 Jan 2005 09:35:44 -0600 Received: by smtp.transplace.com (Postfix, from userid 1035) id 63A2811457; Thu, 20 Jan 2005 09:35:44 -0600 (CST) Received: from mail.apache.org (hermes.apache.org [209.237.227.199]) by smtp.transplace.com (Postfix) with SMTP id B5DDF1148D for <[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:35:34 -0600 (CST) Received: (qmail 60113 invoked by uid 500); 20 Jan 2005 15:34:49 -0000 Mailing_List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk list_help: <mailto:[EMAIL PROTECTED]> list_unsubscribe: <mailto:[EMAIL PROTECTED]> list_post: <mailto:users@spamassassin.apache.org> List_Id: <users.spamassassin.apache.org> Delivered_To: mailing list users@spamassassin.apache.org Received: (qmail 59968 invoked by uid 500); 20 Jan 2005 15:34:47 -0000 Delivered_To: [EMAIL PROTECTED] Received: (qmail 59936 invoked by uid 99); 20 Jan 2005 15:34:47 -0000 X_ASF_Spam_Status: No, hits=0.0 required=10.0 tests= X_Spam_Check_By: apache.org Received_SPF: neutral (hermes.apache.org: local policy) Received: from mailgate1.dslextreme.com (HELO mailgate1.dslextreme.com) (66.51.199.94) by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005 07:34:45 -0800 Received: from mail5.dslextreme.com (unknown [192.168.7.93]) by mailgate1.dslextreme.com (Postfix) with SMTP id 80D59630309 for <[EMAIL PROTECTED]>; Thu, 20 Jan 2005 07:32:11 -0800 (PST) Received: (qmail 1604 invoked from network); 20 Jan 2005 15:34:42 -0000 Received: from unknown (HELO espphotography.dslextreme.com) (66.245.217.196) by mail5.dslextreme.com with SMTP; Thu, 20 Jan 2005 07:34:42 -0800 $MessageID: <[EMAIL PROTECTED]> $Mailer: QUALCOMM Windows Eudora Version 6.2.0.14 PostedDate: 01/20/2005 09:34:36 AM SendTo: [EMAIL PROTECTED] From: Evan Platt <[EMAIL PROTECTED]> Subject: Re: Testing a message In_Reply_To: <[EMAIL PROTECTED]> References: <[EMAIL PROTECTED]> MIME_Version: 1.0 X_DSLExtreme_MailGate_Information: Please contact the ISP for more information X_DSLExtreme_MailGate: Found to be clean X_MailScanner_From: [EMAIL PROTECTED] X_Virus_Checked: Checked X_Spam_Checker_Version: SpamAssassin 2.63 (2004-01-11) on pfbspmp1.transplace.com X_Spam_Status: No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X_Spam_Level: $MIMETrack: Itemize by SMTP Server on psplotp1/com(Release 5.0.11 |July 24, 2002) at 01/20/2005 09:35:44 AM,MIME-CD by Notes Client on Kyle Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22 AM,MIME-CD complete at 01/20/2005 09:44:22 AM SMTPOriginator: [EMAIL PROTECTED] $UpdatedBy: $Orig: Categories: $Revisions: RouteServers: CN=psplotp1/O=com RouteTimes: 01/20/2005 09:35:44 AM-01/20/2005 09:35:44 AM $MsgTrackFlags: 0 DeliveredDate: 01/20/2005 09:35:44 AM

At 07:22 AM 1/20/2005, you wrote:


Greetings!

 I'm using SA 3.0.2 with postfix and amavisd.  (so no spamd is running)
A message came in that was not spam that got blocked.  I took it to
sa-learn and learned it as ham.

I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?


Someone will I'm sure correct me if I'm wrong...

but back when I was a geek in training, I could save the message to a file,
and run

spamassassin < filename1 > filename2

where filename1 was the original file, filename2 is the output file that SA
would create with the new score.

This may have changed...

Evan

**********************************************************************************************************************************************************************************


Thanks,


Kyle Reynolds 972-731-4731 [EMAIL PROTECTED]



Reply via email to