On 02/20/2014 06:06 PM, Amir Caspi wrote:
Hi all,Following some off-list discussions with Kevin, John, et al., I had a question that was suggested I bring up on-list, so here it is: For whatever reason, many of the FNs I've been getting lately are passing because they hit BAYES_00, even though they are matching AC_SPAMMY_URI_PATTERNS. I need to enable bayes tokens in the headers so I can see why these are considered so hammy when I know for sure they're not... But, I would love if there were a way to ignore the bayes score if AC_SPAMMY_URI_PATTERNS matches. I know this is rather silly -- the whole point of Bayes is to help determine if an email is spam or ham regardless of the other rules -- but I'm just flummoxed by having these obviously-spammy emails being treated as ham. Should I create a rule that adds extra points if AC_SPAMMY_URI_PATTERNS hits AND a low Bayes score is found? Or should I just make AC_SPAMMY_URI_PATTERNS a poison pill, since I've never gotten an FP out of it? Not sure what else to do about these Bayes-killing spams (besides wiping my entire Bayes DB and starting over). Thoughts?
Amir, What kind of traffic are you dealing with? personal, corporate? ISPish? How many domains/users/msgs/day? There's a number of options depending on the amount of traffic you handle.
