On 7/23/2018 11:49 PM, Bill Cole wrote:
The goal is to get a copy of the message that is identical to what SA saw when it arrived. For IMAP users, this is easiest to get with a 'missed spam' mailbox into which users can move messages for learning. If you must rely on forwarded submissions, make sure users are forwarding messages as attachments, and have the target deliver into a mailbox that is processed to extract the 'message/rfc822' MIME object(s) in those submissions and learn those, not the submission mail itself.
Any specific utilities you could suggest?
Learning ham is harder, because generally speaking it is not a good idea to deliver mail that SA believes is spam *at all* unless you can't reject it in SMTP. As a result, users don't have 'false positive' samples to submit
Fortunately my system delivers the SPAM to a quarantine (rolling 7 day purge), so users know how to go look for their false positives; my next step is to figure out how to feed that back in to sa-learn as well. That happens to be a commercial system though (spamassassin is being used as one scanner engine in a commercial package I'm using.)
-- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - -----------------------------------------------
