On 6/10/2013 2:45 PM, Duncan, Brian M. wrote: > I rarely have seen any SpamAssasin hits on the bodies of these messages. > > (cached, score=-0.125, required 6.5, autolearn=not spam, > RP_MATCHES_RCVD -0.12)
Do you train the Bayes database manually? Or via autolearn only? I use SA via AMaViS, and the header changes look slightly different from yours, but I see no evidence that Bayes scoring is being used in the above header (if, in fact, that is a sample header with all SA markup appended). --Ben Thanks for the reply, We use Autolearn only. I was thinking of starting some manual training after this bout of messages getting through, I just did not know how much of a benefit I would see given the behavior of the Spammer -And I have to setup IMAP2mbox so I can get these messages from Exchange over to my sendmail boxes first, hope to do that today.. All the hosts are winding up on Zen and Maps after 24 hours, but they only send like 20 messages in each set into my environment.. Then they switch to a new sending mail server, I figured they would have burned through their hosts by now. This sender seems to have amassed a large number of servers (not workstation botnets) before starting this last week. I can't recall the last time we had this happen. Brian =========================================================== CIRCULAR 230 DISCLOSURE: Pursuant to Regulations Governing Practice Before the Internal Revenue Service, any tax advice contained herein is not intended or written to be used and cannot be used by a taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer. =========================================================== CONFIDENTIALITY NOTICE: This electronic mail message and any attached files contain information intended for the exclusive use of the individual or entity to whom it is addressed and may contain information that is proprietary, privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any viewing, copying, disclosure or distribution of this information may be subject to legal restriction or sanction. Please notify the sender, by electronic mail or telephone, of any unintended recipients and delete the original message without making any copies. =========================================================== NOTIFICATION: Katten Muchin Rosenman LLP is an Illinois limited liability partnership that has elected to be governed by the Illinois Uniform Partnership Act (1997). ===========================================================
