Hello Matías,
Friday, February 11, 2005, 1:35:19 PM, you wrote:
It's also hitting BAYES_99, which means your global Bayes database (since you're running as root) thinks for sure this is NOT spam. You've got a problem with the emails you've been learning in the past.
MLB> This are bad news. MLB> What could happened?? This can be caused only by a bad training? MLB> I have stored all the mail that I feed sa-learn with. MLB> What can I do to debug and solve this problem??
The problem here is that since you use the central database as root, but not as the user, root's execution of spamassassin is able to see this, but the user is not.
I'm going to configure the bayes site-wide and see if I achieve a better result.
As for the other differences, I don't know why you're getting the different rule hits.
If you save the "spamassassin -D" output from each of the three users to files, and use diff to compare them, what differences are there?
That's exactly what I did, The only differences that I got belongs to the output of razor or dcc.
[EMAIL PROTECTED] tmp]# spamassassin -D < /tmp/raro 2>&1 | grep .cf > rootsacheck
[EMAIL PROTECTED] tmp]# su - mlopezb
-bash-2.05b$ spamassassin -D < /tmp/raro 2>&1 | grep .cf > mlbsacheck
-bash-2.05b$ logout
[EMAIL PROTECTED] tmp]# diff /tmp/rootsacheck ~mlopezb/mlbsacheck
43c43,44
< Feb 14 12:24:49.585575 check[31720]: [ 6] shock.cloudmark.com is a Catalogue Server srl 5060; computed min_cf=6, Server se: C8
---
> Feb 14 12:25:10.727032 check[31797]: [ 6] pride.cloudmark.com is a Catalogue Server srl 5060; computed min_cf=6, Server se: C8
> Feb 14 12:25:11.234550 check[31797]: [ 6] pride.cloudmark.com is a Catalogue Server srl 5060; computed min_cf=6, debug: Using results from Razor v2.67
49d49
< Feb 14 12:24:50.109628 check[31720]: [ 6] shock.cloudmark.com is a Catalogue Server srl 5060; computed min_cf=6, Server se: C8
51c51
< Feb 14 12:24:50.713196 check[31720]: [ 6] mail 1.0 e=4 sig=5Zkyq938lxN0VuKPy1icYZcRSLMA: Is spam: cf 40 >= min_cf 6
---
> Feb 14 12:25:11.844318 check[31797]: [ 6] mail 1.0 e=4 sig=5Zkyq938lxN0VuKPy1icYZcRSLMA: Is spam: cf 40 >= min_cf 6
[EMAIL PROTECTED] tmp]#
Thanks a lot for your help Bob.
BR, Matías.
