SA, Bayes, and You (erm, Me)
maxsec at gmail.com
Wed Jan 12 04:42:55 PST 2005
>From tha man pages..settings in local.cf
bayes_auto_learn ( 0 | 1 ) (default: 1)
bayes_auto_learn_threshold_nonspam n.nn (default: 0.1)
bayes_auto_learn_threshold_spam n.nn (default: 12.0)
Now this assumes that you have write access to the bayes DB files and directory.
When you editted the local.cf did you restart
spamd/amavis-new/MailScanner or whatever you use?
A trick is use "spamassassin -D --lint message" as well so you can see
a little more clearly whats (not) happening.
On Tue, 11 Jan 2005 22:35:10 -0600, Eric F Crist
<ecrist at secure-computing.net> wrote:
> Hello list,
> Here's a question for anyone familiar with SpamAssassin. I've trained
> my bayes database with a few hundred pieces of ham and spam, and my
> email filtering has gotten a lot better. However, when I read the
> headers of any messages, I notice that they ALL say 'autolearn=no',
> even though I've enabled autolearn in local.cf (bayes_auto_learn 1).
> Here's an example:
> X-Spam-Flag: YES
> X-Spam-Status: Yes, hits=18.9 required=5.0
> autolearn=no version=2.64
> X-Spam-Report: * 1.0 FROM_ENDS_IN_NUMS From: ends in numbers * 1.2
> MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME * 0.1
> HTML_MESSAGE BODY: HTML included in message * 0.1
> HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette *
> 1.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51
> and 100 * [cf: 100] * 5.4 BAYES_99 BODY: Bayesian spam
> probability is 99 to 100% * [score: 1.0000] * 1.0 RAZOR2_CHECK
> Listed in Razor2 (http://razor.sf.net/) * 0.1 RCVD_IN_SORBS_DUL RBL:
> SORBS: sent directly from dynamic IP address * [220.127.116.11
> listed in dnsbl.sorbs.net] * 0.7 RCVD_IN_DSBL RBL: Received via a
> relay in list.dsbl.org * [<http://dsbl.org/listing?18.104.22.168>]
> * 1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
> bl.spamcop.net * [Blocked - see
> <http://www.spamcop.net/bl.shtml?22.214.171.124>] * 4.9 RCVD_IN_XBL
> RBL: Received via a relay in Spamhaus XBL * [126.96.36.199 listed
> in sbl-xbl.spamhaus.org] * 1.7 RCVD_IN_NJABL_DUL RBL: NJABL: dialup
> sender did non-local SMTP * [188.8.131.52 listed in
> thanks for the input.
> Eric F Crist "I am so smart, S.M.R.T!"
> Secure Computing Networks -Homer J Simpson
More information about the freebsd-questions