--As of August 25, 2014 7:49:39 PM +0200, Reindl Harald is alleged to have
said:
Am 25.08.2014 um 19:35 schrieb Daniel Staal:
--As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to
have said:
masscheck ties to ensure spams score at least 5 points, but doesn't
care beyond that
yes, but given that the intention is to flag message above
5 with [SPAM] and reject messages above 7 which is the
intention running SA as milter the reduced score matters
Who sets that policy? Is it something you could think about
changing (if it's a problem).
finally i do that - which values needs to be found out and honestly
seeing that change i am unsure how to set score limits for both
(flag and reject) to prevent too mach messages passing through
and at the same time if such a large change happens introduce
false positives from one day to another
Based on a quick check of my email, if you consider 'flagged' as non-spam
(but possible), then I'd probably set flag at 3 or 4, and reject (as spam)
at 5. Personally I use a 'probably spam' and 'definitely spam' system
(both are set aside), with cutoffs at 5 and 10, respectively.
But part of the point is that 7.5 to 5.3 is *not* a large change, as far a
spamassassin is concerned. 5.1 to 4.9 would be a large change. ;)
I have rarely ever had a false positive with spamassassin - I get maybe
two-three a year. I get that in false negatives a day, when things are
working well. (Which amounts to about 1% of the spam I get as false
negative.)
i admit not have that much expierience but want to avoid
major mistakes in the setup as good as possible before
going live
My advice: Don't over-think it. Spamassassin normally does a good job,
with base settings and things turned on. Train your bayes well, and watch
for new things, but in general don't try messing with a lot of settings
unless you have problems with a live mail stream.
Did the percentage of spam flagged vs. rejected change overall?
i am at early testing of SA and there is no active mail flow
since i am about finsish admin backends and how to generate
config files for SA/ClamAV/Postfix which is now at a nearly
"well, for my private doamin as public test good enough"
Every time the rules update some rules will be scored higher and
some lower, so figuring out each individual case is going to be
pointless, but if the overall percentages remain stable your system
hasn't actually changed how it operates
as said - i am about implement SA, saw the message from the
update cronjob the first time for some days and looked a
bit deeper if things changed
And I think you ended up over-thinking it. It was marked as spam before,
it's marked as spam now. Some other emails would probably have scored
higher than they used to. We've actually had a long break in updates -
usually they are multiple times a week, if not every day, but it's been
around a month since they last updated. Rules probably changed scores more
than normal - but it still scored the mail as spam.
Daniel T. Staal
---------------------------------------------------------------
This email copyright the author. Unless otherwise noted, you
are expressly allowed to retransmit, quote, or otherwise use
the contents for non-commercial purposes. This copyright will
expire 5 years after the author's death, or in 30 years,
whichever is longer, unless such a period is in excess of
local copyright law.
---------------------------------------------------------------
