--On Tuesday, October 22, 2013 12:24 PM -0700 John Hardin
<jhar...@impsec.org> wrote:
On Tue, 22 Oct 2013, Quanah Gibson-Mount wrote:
We have an issue where a lot of spam is being autolearned as HAM by SA.
Do people generally turn off autolearn? In looking at these cases, I'm
not seeing where it is particularly helpful, but it is particularly
harmful.
Example:
X-Spam-Status: No, score=0.348 tagged_above=-10 required=3
tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, HTML_IMAGE_RATIO_02=0.437, HTML_MESSAGE=0.001,
RP_MATCHES_RCVD=-0.8, T_HEADER_FROM_DIFFERENT_DOMAINS=0.01]
autolearn=ham
What are your thresholds set to? You might want to lower your ham
learning threshold and zero the RP_MATCHES_RCVD score.
Thresholds are definitely enabled:
v310.pre:loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
And it looks like we use the defaults:
10_default_prefs.cf:ifplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
10_default_prefs.cf:bayes_auto_learn_threshold_nonspam 0.1
10_default_prefs.cf:bayes_auto_learn_threshold_spam 12.0
However, as I read the docs, the score is supposed to be lower for it to be
autolearned. Last I checked, 0.348 > 0.1, so why was this autolearned as
HAM if the cutoff is 0.1?
--Quanah
--
Quanah Gibson-Mount
Architect - Server
Zimbra, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration
