-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 24-02-15 22:56, Yves Goergen wrote: > Am 24.02.2015 um 22:00 schrieb Axb: >> On 02/24/2015 09:28 PM, Yves Goergen wrote: >>> https://drive.google.com/file/d/0B8CN0ghdY1SdSzBqdkswRUdOb0U/view >>> >>> >>> ZIP password: spam >>> (Google thinks there's a virus in it so I needed to encrypt >>> it.) >> >> didn't need a password to extract but... whatever format those >> .eml are in, none of text editors was able to handle them so that >> didn't help. > > If you weren't asked for a password, then the files were not > decrypted. If you can decrypt them (I used 7-Zip to create the > archive, but ZIP encryption seems incompatible between programs, > could create a .7z archive as well, but these seem to be > unsupported and unwanted by most, despite their highly superiour > performance), then you'll have plain text files as Thunderbird > received and exported them. Nothing unusual. > >>>> - What plugins are you using? (pls specify: Razor, Pyzor, >>>> DCC, etc) >> >> neither of thsoe are installed by default so you ma want to look >> into them. >> >> RAZR/PYZOR DCCC will make a huge difference. > > Okay, so I'll take a look into what they are and how to install > and configure them. > >> I'd definitely suggest you enable the Spamhaus & SURBL rules. > > They have strange TOS that actually forbid using them for more than > a single mailbox. Otherwise you need to pay for it. My data centre > provider wrote an interesting posting about the current situation > in their closed customer forums. They're in a bad position as long > as customers still access Spamhaus services from their network. > Nobody should support them anymore, really. They're evil. > >> Last but not least, get your Bayes setup running and it will give >> you the extra edge. > > I once had Bayes enabled, but since it's an unattended server > system, it can only learn from itself. And that had worked really > bad in the past. So I disabled it completely last time I set it up. > How should Bayes work if nobody gives feedback about the messages > from their Thunderbird clients? And I've tried creating rules for > those Polish words, but it's different words all the time. I wonder > whether they actually mean something. And it's only very few words > per messages, many even with corrupt encoding including HTML > entities. Again, how could Bayes help here? >
The problem here that you're stating "it's an unattended server system". E-mail and spam change all the time, you cannot have great filtering without adjusting to new trends and threats. Using bayesian filtering is an easy way to improve detection, because you only need to decide whether mail is ham or spam, and the bayes engine does most of the other hard work for you. If you're not going to put in some effort to either train a bayesian filter for your users, of enable them to train it themselves (this has some risks you should be aware of), your filtering won't improve. But on the other hand: trying to write your own SA rules in order to block mails in a language you don't even understand is a lot harder. Tom -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJU7PebAAoJEJPfMZ19VO/14HAP/A57vNLDgHjmt0JvBi98RAnY Jez138atfRynhLIFxy2w8MDwWy2HWSi6v/NpnXMVjZ2DYmyMBrJNC1Tn2aYrM3Mu uxPxfOTVNlyG2FjY3iw8XwvlSJ28shcuU8WrbTrvvD81Mv2UyBVhsaNcFNNss5Gg PATgOtU8IIn/sqb85uLu0DkyWR7LbM3SMfmNLQ1O5uRV+9212vFfHSS6Bi8/XdJ0 KCwxBlQrI8wb1hMPzPUGFa39ke307V6HugOZtSX/JkM4Ub8vSpscvvi14Up3Cde3 WlCod8SPf7cox1jwt5aahLNhESFp9fAeXHA+QCpfBAq2wiGTVFnOhm3EqE93JMw8 Btt51cTzeaIW58ho6mTAU56IBEb6phPI7mCXtcIDbtJ6WtHNWv9ozYdyp/3aQB6Z gfe2DxzuF9Nx9g3jimyCHSeh7/ZOHw5i3U5sp77lvQ1a+B0UEf5cW6DkG/flXnRg o6j2yWfId0elYU+h5K8EMeWzOCK8fv02W5PIsBzVRMv9VR15/22IdOdger1gAYWZ uyttaqOVJkN8FREO4jo1JO4Si6BJFTu3c4bWLeFbYcx2s/7RY0jQeE59B8RWBa+l CHYLOU8IhXSBKlMyvn2A6cnDPr/lyk1aeZzL0eSVGHXXyU7b0VdEYAH7K9LzEpXK EHRkis0DOJAomQrjNuvj =TuOX -----END PGP SIGNATURE-----