Re: [SLUG] spamassassin autolearn

From: Mike Branda (mike@wackyworld.tv)
Date: Sun Sep 30 2007 - 09:31:18 EDT


Eben King wrote:

> Received: from localhost by pc.verizon.net
> with SpamAssassin (version 3.0.4);
> Fri, 28 Sep 2007 22:16:18 -0400
> From: <cherry@hitouchimaging.com>
> To: eking@eng.usf.edu
> Subject: Porsche Design Yacht rocks market
> Date: Fri, 28 Sep 2007 17:36:33 -0700
> Message-Id: <46FD9E11.7080408@hitouchimaging.com>
> X-Spam-Flag: YES
> X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on pc.verizon.net
> X-Spam-Level: ************
> X-Spam-Status: Yes, score=12.8 required=0.0 tests=BAYES_80,
> HELO_DYNAMIC_IPADDR,NO_REAL_NAME,RCVD_IN_BL_SPAMCOP_NET,
> RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL autolearn=no
> version=3.0.4
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="----------=_46FDB572.87612DA4"
> Parts/Attachments:
> 1 Shown 31 lines Text
> 2 Shown 1.7 KB Message, "original message before SpamAssassin"
> 2.1 Shown 11 lines Text
> ----------------------------------------
>
> Spam detection software, running on the system "pc.verizon.net", has
> (etc)
>
> [ Part 2: "original message before SpamAssassin" ]
>

Note the line above... this separates what your system added above this
line from the original message headers from Verizon below the line.

> Return-Path: <cherry@hitouchimaging.com>
> X-Original-To: eben@localhost
> Delivered-To: eben@localhost
> Received: from localhost (localhost.localdomain [127.0.0.1])
> by pc (Postfix) with ESMTP id 46D5010646
> for <eben@localhost>; Fri, 28 Sep 2007 22:16:07 -0400 (EDT)
> Received: from dinos.eng.usf.edu [131.247.14.1]
> by localhost with POP3 (fetchmail-6.2.5)
> for eben@localhost (single-drop); Fri, 28 Sep 2007 22:16:07 -0400 (EDT)
> Received: from pool-72-67-228-223.lsanca.fios.verizon.net
> (pool-72-67-228-223.lsanca.fios.verizon.net [72.67.228.223])
> by eng.usf.edu (8.13.8/8.13.6) with SMTP id l8T0ZolT005595
> for <eking@eng.usf.edu>; Fri, 28 Sep 2007 20:35:56 -0400
> Received: (qmail 17805 invoked from network); Fri,
> 28 Sep 2007 17:36:33 -0700
> Received: from unknown (HELO gkusg) (39.160.64.65)
> by pool-72-67-228-223.lsanca.fios.verizon.net with SMTP; Fri,
> 28 Sep 2007 17:36:33 -0700
> Message-ID: <46FD9E11.7080408@hitouchimaging.com>
> Date: Fri, 28 Sep 2007 17:36:33 -0700
> From: <cherry@hitouchimaging.com>
> User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
> MIME-Version: 1.0
> To: eking@eng.usf.edu
> Subject: Porsche Design Yacht rocks market
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> Content-Transfer-Encoding: 7bit
> X-Spam-Status: No, score=-1.6 version=3.1.9 autolearn=no
> X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on dinos
>
> New High Speed Yacht Hits Market!
> (etc)
>
> Now, was that second X-Spam-Status added by my machine?

By second, do you mean the -1.6 above? If so, that would actually be
the first/original message X-Spam-Status. Notice the Received: entries
and time stamps between both sets of headers.

As for the auto ham thing... do you nave any foo.pre files in your
spamassassin config directory? If so, check them out. I noticed a lot
of AWL and autolearn stuff in those after I upgraded my spamassassin
version recently. The way I knew about those was a "spamassassin -D
--lint" to which they show up in the debug as being loaded.

If they are there, you can learn more about the details of their use
with a man Mail::SpamAssassin::Plugin::foo for most of them.

HTH!

Mike Branda Jr.
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:28:02 EDT