Axb wrote > On 08/05/2014 06:06 PM, Bowie Bailey wrote: >> On 8/5/2014 11:50 AM, RobertGrimes wrote: >>> >>> I don't know if this is fair to ask, but would you (or anyone) care to >>> see >>> if the message I am posting should be rated higher than 1.9? I >>> appologize if >>> this is not appropriate. >>> >>> The message is at http://pastebin.com/UZeDtLWZ >>> >>> The debug log from spamd is at http://pastebin.com/6FERLq5C >> >> That message doesn't contain much that the general SA rules will match. >> This type of message is a good candidate for Bayes once you get the >> training sorted out. If the headers were there, then there might be >> something. The debug log is not particularly useful. The main thing we >> need to see in this case is the headers that were added to the message. >> >> The message is missing most of the headers. You need to figure out how >> to get the message with all of the headers intact for the best test. One >> way to do it is to get the message directly from the server. If the >> server is using the Maildir format, then each message is its own file >> and you just have to copy the right one. You can also get it from >> Outlook. If you view the message and then poke around in the menus, >> there should be an option to "View Headers". This will actually show >> you the full text of the message along with the headers. This is what >> you need to be testing with and showing us. (Caveat: The last version >> of Outlook I dealt with was 2000, so it may be a bit different now. >> Hopefully the option is still there somewhere.) >> > > AND msg only shows part of the body... > > get the full pristine msg from the hmailserver's Maildir and test > against that.
Advice taken. I have gone back to the basic eml message that comes in. It has had SA headers added but there is not much I can do about that. I have isolated them and have been using sa-learn. I rechecked config files to see where Bayes db is and made sure I am using the same as the spamd is. I have run through about 50 messages via sa-learn. Strange to say, but I need a bunch of spam to come my way to learn and check. I have installed another DNS that is cache only and the cache seems to be holding a number of items. All seems to be going in the correct direction thanks to the great advice I got here. I just wanted to document my approach in case someone else needs the help. -- View this message in context: http://spamassassin.1065346.n5.nabble.com/New-at-SpamAssassin-how-to-not-get-headers-tp110712p110773.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
