> Matus UHLAR - fantomas wrote: > > the first can be catched by using ok_locales
On 30.06.10 04:14, Daniel Lemke wrote: > We are already using ok_locales, but it does not score all of the mail and > if it scores, the few points at all are not enough to identify it as spam > (since bayes still scores negative). I already trained bayes with hundreds > of mails, but it still doesn't recognize this ndr as spam. apparently not enough of NDRs. I trained bayes with many notices and it was able to detect as expected then. BAYES_99 and CHARSET_FARAWAY together should score enough to score as spam. *BOUNCE_MESSAGE score only 0.1 and rising them is not safe. > > For others, there's VBounce plugin that detects delivery notices (and > > similar messages like autoresponders) and tag them for other processing. > > > > You need to configure whitelist_bounce_relays for this plugin to work. > That sounds quite nice, but the documentation says the plugin looks for the > specified mta relay in the Received: header of the mail. If found, it is not > marked as an invalid bounce. No, it searches for it in the body of the mail, and the body of delivery notice should contain IP of your MTA, if the original message went through your MTA (although there are programs that don't include them). Otherwise it's apparendly bounce on forged mail which the VBounce is designed to catch. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "To Boot or not to Boot, that's the question." [WD1270 Caviar]