Re: [SLUG] spamassassin vs pine

From: Mike Branda (realraccoon@tampabay.rr.com)
Date: Sun Jan 15 2006 - 14:29:00 EST


On Sun, 2006-01-15 at 01:41 -0500, Eben King wrote:

>
> Anyhow, I added
>
> required_score 0

>
> Yup. Only 2 out of 481 non-spams that I have get scores of 0 or higher
> (actually both are 0). The rest are negative.
>

Probably due to the ham training. From your previous post, your SA's
basically been on an all ham diet. Almost 10 to 1.

debug: bayes corpus size: nspam = 787, nham = 7777

> > X-Spam-Flag: YES
> > X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
> > mail.wackyworld.lan
> > X-Spam-Level: *************
> > X-Spam-Status: Yes, score=13.5 required=3.0 tests=BAYES_99,
> >
> > DATE_IN_FUTURE_12_24,HELO_DYNAMIC_COMCAST,RCVD_IN_BL_SPAMCOP_NET,
> > RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL autolearn=no version=3.0.4
> >
> > Content analysis details: (13.5 points, 3.0 required)
>
> How'd you do that?
>
> (/etc/mail/spamassassin/user_prefs)
>

You know what.....I wonder if your setup has the stuff for the
blacklists......notice there are the BL/RBL entries from mine that are
high point items.

> Dunno. Good mail has stuff like this:
>
> X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
> pc.tampabay.rr.com
> X-Spam-Level:
> X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham
> version=3.0.4
>

Good. Again, I believe the negative scores are via the ham learning
process.

> Spam (that it caught) has stuff like this:
>
> X-Spam-Flag: YES
> X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
> pc.tampabay.rr.com
> X-Spam-Level: *******
> X-Spam-Status: Yes, score=7.3 required=5.0 tests=BAYES_60,DRUGS_ANXIETY,
> DRUGS_ANXIETY_EREC,DRUGS_DIET,DRUGS_ERECTILE,DRUG_ED_GENERIC,
> FORGED_YAHOO_RCVD,HG_HORMONE,HTML_FONT_BIG,HTML_MESSAGE,
> HTML_SHOUTING5,HTML_TAG_EXIST_TBODY,MIME_QP_LONG_LINE,
> SUBJECT_DRUG_GAP_C autolearn=no version=3.0.4
>

Also good although again it doesn't look like it's using any blacklist
rules.

> Spam (that it missed) has stuff like this:
>
> X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
> pc.tampabay.rr.com
> X-Spam-Level: **
> X-Spam-Status: No, score=2.5 required=5.0 tests=BAYES_50,HTML_90_100,
> HTML_FONT_BIG,HTML_MESSAGE,LONGWORDS,MIME_QP_LONG_LINE autolearn=no
> version=3.0.4
>

Now this one has a score of 2.5 not 0. is this not the more common?

> Need to do some statistical analysis to find out which tests show up in spam
> but not in non-spam, mostly.
>

I'm going to do some looking into the BL/RBL thing and find out if the
SuSE default setup comes with that stuff. Your analysis will hopefully
guide you with any custom scoring if we don't come up with anything
else...

Mike

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 16:32:48 EDT