<html><head><style type="text/css"><!-- DIV {margin:0px} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">Hello,<br><br>If you can move any spam messages you get into a mailspool file, you can use sa-learn to learn the spam messages.<br><br><span><a target="_blank" href="http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html">http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html</a></span><br><br>If afterwards you then run through all your legit mail as ham, that will help to eliminate false positives.<br><br>HTH<br><br>Andy<br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: bascule <asura@theexcession.co.uk><br>To: discuss@swlug.org.uk<br>Sent: Sunday, 30 July, 2006 7:43:33 AM<br>Subject: [SWLUG] help required with
spamassassin<br><br><div>i'm getting really low detection rates with spamassassin and i can't work out <br>why. mail is received by postfix from fetchmail and handed off to spamd (via <br>spamc) and then received back and passed to cyrus, it seems i have sa set up <br>right or else i wouldn't get any spam detected right? i have sa configured to <br>add an identifier to the subject line and i do get a few everyday, i think my <br>config for sa and postfix may be slightly non-standard in that i have a mail <br>user (or more than one if i so chose) that isn't a system user, but has a <br>user_prefs stored under /var/spool/spamassassin/prefs that is referenced by <br>the command that runs spamd:<br>SPAMDOPTIONS="-d -c -u cyrus -x <br>--virtual-config-dir=/var/spool/spamassassin/prefs/%l"<br><br>this tells spamd to use the user prefs of whatever user postfix has destined <br>the mail for, my user_prefs is very simple:<br><br>required_hits 5<br>rewrite_header Subject
[SPAM]<br>report_safe 0<br>auto_whitelist_path /var/spool/spamassassin/auto-whitelist<br>auto_whitelist_file_mode 0666<br>dcc_home /var/lib/dcc<br>whitelist_to cardifffreecycle@yahoogroups.com<br><br>under /etc/mail/spamassassin i have a few rulesets:<br>[root@watson bascule]# ls /etc/mail/spamassassin/<br>70_sare_adult.cf 70_sare_genlsubj0.cf 70_sare_html0.cf <br>70_sare_random.cf 70_sare_uri_eng.cf local.cf<br>70_sare_bayes_poison_nxm.cf 70_sare_genlsubj1.cf 70_sare_html1.cf
<br>70_sare_specific.cf 70_sc_top200.cf RulesDuJour/<br>70_sare_evilnum0.cf 70_sare_genlsubj_eng.cf 70_sare_html_eng.cf <br>70_sare_spoof.cf 72_sare_bml_post25x.cf spamassassin-default.rc<br>70_sare_evilnum1.cf 70_sare_header0.cf 70_sare_obfu0.cf <br>70_sare_unsub.cf 99_sare_fraud_post25x.cf spamassassin-spamc.rc<br>70_sare_evilnum2.cf 70_sare_header1.cf 70_sare_obfu1.cf
<br>70_sare_uri0.cf antidrug.cf tripwire.cf<br>70_sare_genlsub0.cf 70_sare_header_eng.cf 70_sare_oem.cf <br>70_sare_uri1.cf init.pre user_prefs.template<br>and i use rules_du_jour to keep them updated, i've begun to wonder though if <br>my setup is somehow bypassing all these rulesets, because although there is <br>an argument that sa is not necessarily the best spam tool today i would <br>expect it to get over half my spam instead of less then half!<br><br>if someone with knowledge and time is able to help me trouble shoot this i'd <br>be grateful, just ask for any info you need<br><br>bascule<br>--
<br>"there's nothing an agnostic can't do if he really doesn't know if he believes<br>in anything or not" - M.Python<br>_______________________________________________<br>SWLUG Discussion List - Discuss@swlug.org<br><a target="_blank" href="http://swlug.org/mailman/listinfo/discuss">http://swlug.org/mailman/listinfo/discuss</a><br></div></div><br></div></div></body></html>