SA, Bayes, and You (erm, Me)

[Martin Hepworth]

>From tha man pages..settings in local.cf

bayes_auto_learn ( 0 | 1 ) (default: 1)

bayes_auto_learn_threshold_nonspam n.nn (default: 0.1)

bayes_auto_learn_threshold_spam n.nn (default: 12.0)
   
Now this assumes that you have write access to the bayes DB files and directory.

When you editted the local.cf did you restart
spamd/amavis-new/MailScanner or whatever you use?

A trick is use "spamassassin -D --lint message" as well so you can see
a little more clearly whats (not) happening.

--
martin

On Tue, 11 Jan 2005 22:35:10 -0600, Eric F Crist
<ecrist at secure-computing.net> wrote:
> Hello list,
> 
> Here's a question for anyone familiar with SpamAssassin.  I've trained
> my bayes database with a few hundred pieces of ham and spam, and my
> email filtering has gotten a lot better.  However, when I read the
> headers of any messages, I notice that they ALL say 'autolearn=no',
> even though I've enabled autolearn in local.cf (bayes_auto_learn 1).
> Here's an example:
> 
>         X-Spam-Flag:    YES
>         X-Spam-Status:  Yes, hits=18.9 required=5.0
> tests=BAYES_99,FROM_ENDS_IN_NUMS,
> HTML_FONTCOLOR_UNSAFE,HTML_MESSAGE,MIME_HTML_MOSTLY,
> RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
> RCVD_IN_DSBL,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL
> autolearn=no version=2.64
>         X-Spam-Report:  *  1.0 FROM_ENDS_IN_NUMS From: ends in numbers *  1.2
> MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME *  0.1
> HTML_MESSAGE BODY: HTML included in message *  0.1
> HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette *
>   1.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51
> and 100 *      [cf: 100] *  5.4 BAYES_99 BODY: Bayesian spam
> probability is 99 to 100% *      [score: 1.0000] *  1.0 RAZOR2_CHECK
> Listed in Razor2 (http://razor.sf.net/) *  0.1 RCVD_IN_SORBS_DUL RBL:
> SORBS: sent directly from dynamic IP address *      [220.30.172.98
> listed in dnsbl.sorbs.net] *  0.7 RCVD_IN_DSBL RBL: Received via a
> relay in list.dsbl.org *      [<http://dsbl.org/listing?220.30.172.98>]
> *  1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
> bl.spamcop.net *      [Blocked - see
> <http://www.spamcop.net/bl.shtml?220.30.172.98>] *  4.9 RCVD_IN_XBL
> RBL: Received via a relay in Spamhaus XBL *      [220.30.172.98 listed
> in sbl-xbl.spamhaus.org] *  1.7 RCVD_IN_NJABL_DUL RBL: NJABL: dialup
> sender did non-local SMTP *      [220.30.172.98 listed in
> combined.njabl.org]
> 
> thanks for the input.
> 
> _______________________________________________________
> Eric F Crist                  "I am so smart, S.M.R.T!"
> Secure Computing Networks              -Homer J Simpson
> 
> 
>