On Tuesday 21 April 2009, alexus wrote:
>On Tue, Apr 21, 2009 at 4:03 PM, alexus <ale...@gmail.com> wrote:
>> On Tue, Apr 21, 2009 at 3:58 PM, Gene Heskett <gene.hesk...@verizon.net>
wrote:
>>> On Tuesday 21 April 2009, alexus wrote:
>>>>On Tue, Apr 21, 2009 at 1:21 AM, Gene Heskett <gene.hesk...@verizon.net>
>>>
>>> wrote:
>>>>> On Monday 20 April 2009, alexus wrote:
>>>>>>i'm trying to teach my SA whats spam
>>>>>>
>>>>>>it's a brand new out of box SA, i have few domains that i dont get
>>>>>>anything but a spam and on the top seems like from same spamers as
>>>>>>they "picked" emails that they thought would be good to spam and keep
>>>>>>on spaming them
>>>>>>
>>>>>>so i do sa-learn --spam *
>>>>>>after a while it saying something like
>>>>>>
>>>>>>Learned tokens from 52 message(s) (52 message(s) examined)
>>>>>>
>>>>>>yet, when more of some what same email comes in it still can't
>>>>>>determinate if its spam or not...
>>>>>>
>>>>>>am i doing something wrong? or is sa-learn isn't suppose to work as i
>>>>>>thought it would..
>>>>>
>>>>> You need to have it learn at least 200 messages of both 'ham' and
>>>>> 'spam' before it has enough data to switch to working mode. So sort
>>>>> them into separate directories, and have it learn both a clean inbox as
>>>>> ham, and an all spam directory. When it has learned those, it keep
>>>>> track and will not learn those particular emails again, so clean the
>>>>> spam box, just delete its contents. I even use a cleaned up, sorted to
>>>>> separate directories mailing list as ham just so it knows stuff from
>>>>> that list is generally ham. I had one list that I never figured out
>>>>> what was spammy about it, and since the corpus of that list went back
>>>>> several years, I fed the whole thing to SA as ham. Took it several
>>>>> hours but no more problems with that lists messages now. Now, the spam
>>>>> that does get through goes into a spam dir, and a cron job learns it,
>>>>> then deletes it daily. I'm lazy, and repetitive tasks are to be done
>>>>> by a cron fired script around this camp.
>>>>>
>>>>> :)
>>>>>
>>>>> --
>>>>> Cheers, Gene
>>>>> "There are four boxes to be used in defense of liberty:
>>>>> soap, ballot, jury, and ammo. Please use in that order."
>>>>> -Ed Howdershelt (Author)
>>>>> Any two philosophers can tell each other all they know in two hours.
>>>>> -- Oliver Wendell Holmes, Jr.
>>>>
>>>>how do I change my SA from learning mode to working mode?
>>>
>>> I believe that is automatic once it has enough data. See above, 200 msgs
>>> of each type required IIRC.
>>>
>>> Understand that SA only rates the email, and puts its findings in the
>>> header. It is up to you to determine what is done with mail that is too
>>> spammy. I use procmail as the MTA from fetchmail, and procmail is
>>> configured to send anything that SA labels with 5 stars or over to
>>> /dev/null.
>>>
>>> --
>>> Cheers, Gene
>>> "There are four boxes to be used in defense of liberty:
>>> soap, ballot, jury, and ammo. Please use in that order."
>>> -Ed Howdershelt (Author)
>>> Delta: The kids will love our inflatable slides. -- David Letterman
>>
>> an example
>>
>> Received: by simscan 1.4.0 ppid: 97779, pid: 97780, t: 3.8809s
>> scanners: regex: 1.4.0 clamav: 0.95/m:50/d:9252 spam: 3.2.5
>> X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx1.alexus.biz
>> X-Spam-Level: ****
>> X-Spam-Status: No, score=4.9 required=5.0 tests=BAYES_99,HTML_MESSAGE,
>> MIME_HTML_ONLY,SPF_HELO_PASS autolearn=no version=3.2.5
>>
>> it gave BAYES_99, yet it still think it's autolearn=no, and it still
>> doesnt think this is SPAM
>>
>> --
>> http://alexus.org/
>
>this is from another email
>
>X-Spam-Flag: YES
>X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx1.alexus.biz
>X-Spam-Level: *****
>X-Spam-Status: Yes, score=5.6 required=5.0 tests=BAYES_99,HTML_MESSAGE,
> MIME_HTML_ONLY,SPF_HELO_PASS,SPF_SOFTFAIL autolearn=no version=3.2.5
>X-Spam-Report:
> * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
> * [score: 1.0000]
> * -0.0 SPF_HELO_PASS SPF: HELO matches SPF record
> * 0.6 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
> * 0.0 HTML_MESSAGE BODY: HTML included in message
> * 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
>
>how can I put X-Spam-Report into every email? because this was
>generated manually via "spamassassin -t email"
That I do not know, because I have never used anything but the number of ***
in the X-Spam-Level line.
--
Cheers, Gene
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Hating the Yankees is as American as pizza pie, unwed mothers and
cheating on your income tax.
-- Mike Royko
