On Mon, 2017-03-20 at 11:12 +0100, Bernard wrote: ....
> Am I missing something? > I think so. Bayes cannot have its spamminess score changed by a single message, since its results would be very unstable if this was possible. There is also a strong a clue that this is designed behavior when you consider that Bayes has no effect on spam scoring until its has learnt 200 ham AND spam messages. If you want an immediate change in spamminess scoring, you can: - whitelist or blacklist the sender if the message source is a reliable indicator, e.g. blacklist a domain that is employed by retailers to send targeted mail to previous customers. Use the authorised blacklist-* and whitelist-* statements to do this, not the plain 'whitelist' and 'blacklist' ones. - write a rule that explicitly specifies the recognition features in messages, e.g. there may be subtle misspellings of common business phrases in messages sent by spammers or botnets. For instance, if you write a meta rule that only fires if two other rules both fire (one detecting selling phrases and the other looking for product names) then, if carefully done, this will be quite specific for sales spam and, once both sub rules have a reasonable number of alternate targets it will reliable detect combinations that you haven't previously seen. Martin
