> -----Original Message----- > From: shrike-list-admin@xxxxxxxxxx > [mailto:shrike-list-admin@xxxxxxxxxx] On Behalf Of Jake McHenry > Sent: Monday, December 15, 2003 11:39 PM > To: shrike-list@xxxxxxxxxx > Subject: RE: Spam > > > > -----Original Message----- > > From: shrike-list-admin@xxxxxxxxxx > > [mailto:shrike-list-admin@xxxxxxxxxx] On Behalf Of Jake McHenry > > Sent: Monday, December 15, 2003 11:33 PM > > To: 'John P Verel' > > Cc: shrike-list@xxxxxxxxxx > > Subject: RE: Spam > > > > > > > -----Original Message----- > > > From: John P Verel [mailto:jverel@xxxxxxxxxxxxx] > > > Sent: Monday, December 15, 2003 9:33 PM > > > To: Jake McHenry > > > Cc: shrike-list@xxxxxxxxxx > > > Subject: Re: Spam > > > > > > > > > > > > On 12/15/03 20:39 -0500, Jake McHenry wrote: > > > > I'm currently using spamassassin and mailscanner, working > > > well, but my > > > > boss doesn't want any spam to get through. I tried telling him > > that > > > > it's not going to catch everything, but he doesn't want to > > > listen. He > > > > told me to look into mimedefang, which his friend told him > about. > > > > > > > > Does anyone know if mimedefang is any better or worse than > > > > spamassassin? > > > > > > Well, spamassassin does in fact 'de-fang' mime, so you've > got that > > > already. > > > > > > My experience with spamassassin, which is EXCELLENT, is > that the key > > > is to move all the false negatives to your spam folder and to run > > > the sa-learn program regularly. I've also changed my > rules set so > > > that a Bayes90 hit gets an automatic 5 points. I've had 1 false > > > positive in the last month. > > > Spamassassin has caught between 650 and 700 in each of the > > > last three weeks, with I'd guess 10-15 false negatives a week > > > (e.g. 1 or 2 a day.) The number of false negatives keeps > > > dropping the more I use sa-learn. > > > > > > Spamassasin is the greatest, IMHO. > > > > > > John > > > > > > > Here is my output of sa-learn --dump > > > > [admin@ntlh admin]$ sa-learn --dump > > Use of uninitialized value in numeric lt (<) at > > /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm > > line 1281. > > 0.000 0 0 0 non-token data: bayes db > > version > > 0.000 0 0 0 non-token data: nspam > > 0.000 0 0 0 non-token data: nham > > 0.000 0 0 0 non-token data: ntokens > > 0.000 0 0 0 non-token data: oldest atime > > 0.000 0 0 0 non-token data: current > > scan-count > > 0.000 0 0 0 non-token data: last expiry > > atime > > > > > > I'm running spamassassin 2.60 with mailscanner 4.23 > > > > I have bayes enabled in spam.assassin.prefs.conf in the > > mailscanner directory. It seems to be working for the most > > part, I'm getting probably around 80%. None is really being > > mis-marked, just missed. > > > > I also have bayes auto learn enabled in the config file, and > > in the maillog file, I can see the bayes engine is being used: > > > > BAYES_99 19,650 times in the log. Also using DCC and razor2. > > > > What can I do to get my percentage higher? Why isn't the > > spamassassin dump from above showing anything? > > > > I havn't used sa-learn before, I've just been submitting all > > missed mail to the razor2 servers. > > > > > > > > Thanks, > > > > Jake McHenry > > Nittany Travel MIS Coordinator > > http://www.nittanytravel.com > > > > > > > > > > > > -- > > Shrike-list mailing list > > Shrike-list@xxxxxxxxxx > > https://www.redhat.com/mailman/listinfo/shrike> -list > > > > I just did sa-learn --reuild and it got rid of that error line.. Here > is the new output: > > [root@ntlh MailScanner]# sa-learn --dump > 0.000 0 2 0 non-token data: bayes db > version > 0.000 0 0 0 non-token data: nspam > 0.000 0 0 0 non-token data: nham > 0.000 0 0 0 non-token data: ntokens > 0.000 0 0 0 non-token data: oldest atime > 0.000 0 0 0 non-token data: newest atime > 0.000 0 0 0 non-token data: last journal > sync atime > 0.000 0 0 0 non-token data: last expiry > atime > 0.000 0 0 0 non-token data: last expire > atime delta > 0.000 0 0 0 non-token data: last expire > reduction count > > > > I'll keep watching it to see if it changes. A lot of spam passes > through my server, about 40% or 932 messages a day spam alone. > > > As to my previous email, what can I do to get more spam caught? I have > not received anything from the employees saying they are getting mails > marked that shouldn't be, it's that they're getting mails that are not > marked that should be. > > Maybe what I just did with the bayes database will fix it? > > > > Thanks, > > Jake McHenry > Nittany Travel MIS Coordinator > http://www.nittanytravel.com > > > > > > -- > Shrike-list mailing list > Shrike-list@xxxxxxxxxx > https://www.redhat.com/mailman/listinfo/shrike-list > Ok, I goofed.. I changed my command to this: [root@ntlh root]# sa-learn --dbpath /var/spool/spamassassin/ --dump | more 0.000 0 2 0 non-token data: bayes db version 0.000 0 8374 0 non-token data: nspam 0.000 0 16771 0 non-token data: nham 0.000 0 121296 0 non-token data: ntokens 0.000 0 1069976819 0 non-token data: oldest atime 0.000 0 1071550901 0 non-token data: newest atime 0.000 0 1071550512 0 non-token data: last journal sync atime 0.000 0 1071034503 0 non-token data: last expiry atime 0.000 0 1057726 0 non-token data: last expire atime delta 0.000 0 53595 0 non-token data: last expire reduction count <snip> I got a LOT of pages of output from this.. Lol so I take it it's working. So your saying anything that is missed or mis-marked I should save to a file, then do something like sa-learn --spam or --ham --mbox filename correct? Thanks, Jake -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list
