Re: Searched but did not find any info re scores for squirrelmail inbound

2010-06-27 Thread McDonald, Dan


On Jun 27, 2010, at 8:22 PM, bongomania  wrote:

> 
> My email server, squirrelmail, has spamassassin already installed.  To
> configure, it says to enter the score above which emails should be
> quarantined.  

Generally, 5 indicates spam. As a few false positives do occur at those levels, 
so I usually mark spam at 5 and quarantine around 7 to 20. Above 20, I usually 
just discard. 

> Unfortunately nowhere on that page, nor in the SA FAQ, nor in
> the SA WIKI, nor in a search of old messages, can I find any mention of what
> scores are normal to choose.  

You may find the amavisd-new FAQ to be useful. 

> Looking at the scoring system, it seems most
> flags are worth less than 2 points.  But the max is 999!  So what is the
> right range between 1 and 999 for normal usage?
> 
> And, honestly, why is such basic info missing from the entry-level usage
> notes and FAQ?
> 
> Thanks for your help!
> -- 
> View this message in context: 
> http://old.nabble.com/Searched-but-did-not-find-any-info-re-scores-for-squirrelmail-inbound-tp29008487p29008487.html
> Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
> 


Re: Searched but did not find any info re scores for squirrelmail inbound

2010-06-27 Thread Alex
Hi,

> My email server, squirrelmail, has spamassassin already installed.  To

Squirrelmail isn't your email server, it's a client to an email server
like postfix or sendmail.

> configure, it says to enter the score above which emails should be
> quarantined.  Unfortunately nowhere on that page, nor in the SA FAQ, nor in

Perhaps it's not as clear as it should be, but you can find it here:

http://spamassassin.apache.org/full/3.1.x/doc/Mail_SpamAssassin_Conf.html#scoring_options

The default score is 5, before an email is considered spam, but
spamassassin itself only does the scoring -- it's up to another
program, such as amavisd-new (separate application) or spamd (included
with spamassassin) to do something with the email once it has been
determined to be spam.

You should ask your administrator what the default score is, because
while 5 is what most implementations use, it doesn't necessarily mean
it is what yours is using.

Also, even if it is 5, there may be some false positives (mail
inadvertently marked as spam when it shouldn't have been) that raise
the score above 5 that you may want to analyze before discarding.

Regards,
Alex


Searched but did not find any info re scores for squirrelmail inbound

2010-06-27 Thread bongomania

My email server, squirrelmail, has spamassassin already installed.  To
configure, it says to enter the score above which emails should be
quarantined.  Unfortunately nowhere on that page, nor in the SA FAQ, nor in
the SA WIKI, nor in a search of old messages, can I find any mention of what
scores are normal to choose.  Looking at the scoring system, it seems most
flags are worth less than 2 points.  But the max is 999!  So what is the
right range between 1 and 999 for normal usage?

And, honestly, why is such basic info missing from the entry-level usage
notes and FAQ?

Thanks for your help!
-- 
View this message in context: 
http://old.nabble.com/Searched-but-did-not-find-any-info-re-scores-for-squirrelmail-inbound-tp29008487p29008487.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Learning and reporting with spamc in a single step?

2010-06-27 Thread Dan Mahoney, System Admin

Can spamc do this, or must it be forked to "tee" or something.

Ideally I'd like to both report and learn in a single step (such as in a 
pipe from alpine).  I note that spamassassin -r also has the option to 
learn (by default!), but spamc doesn't for some reason.  Or if it does, 
the manpage neglects to mention it.


In a perfect world, I'd also be able to choose the "express" or "manual" 
spamcop methods, which use different reporting addresses, but if I need to 
run two commands anyway from my .procmailrc, I might as well use spamc for 
one and spamassassin (with an alternate config file) for the other.


-Dan Mahoney

--

Dan Mahoney
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---



Re: Basic Setup Questions

2010-06-27 Thread Michael B Allen
On Sun, Jun 27, 2010 at 12:45 PM, Giampaolo Tomassoni
 wrote:
>> Hello,
>>
>> I have just setup spamassassin. A lot of spam is getting filtered. But
>> a lot is not.
>>
>> What are the prevailing additional steps for improving filtering?
>>
>> Is using bayes worth it?
>
> Generally yes. However, it needs training before being reliable.
>
>
>> My default config does not appear to be using bayes. How do I enable
>> it?
>
> use_bayes and bayes_auto_learn are on by default.
>
>
>> The documentation simply says "run sa-learn". Does the creation of
>> the bayes db files effectively enable bayes?
>
> No. You also need to "teach" enough ham and spam tokens to Bayes. By
> default, you should train bayes with at least 200 ham messages and 200 spam
> messages. At that point, you should start seeing bayes scoring your
> messages.

Hi Giampaolo,

That's an important fact. I have plenty of ham but I think I'll wait
for fresh uncaught spam to properly generate bayes data.

>> I have LearnAsSpam IMAP folders for everyone to drag spam that get's
>> through into. How can I run sa-learn so that it builds a /single/
>> database from all of these folders and so that spamd uses that single
>> database for scoring everyone's mail?
>
> Huh, using spamd --nouser-config ?

I seem to have this working by running spamd as the user "spamd" and
then in local.cf I used:

bayes_path /home/spamd/.spamassassin/bayes

At least when it looks like spamd is updating those bayes files and
when I run sa-learn, the same files are updated. So it looks like I
have the single database scenario working.

My intention is to run the following manually every once in a while:

# cat ~/LearnAsSpam.sh
#!/bin/sh

sa-learn --no-sync --spam /home/user1/Maildir/.LearnAsSpam/{cur,new}
sa-learn --no-sync --spam /home/user2/Maildir/.LearnAsSpam/{cur,new}
sa-learn --no-sync --spam /home/user3/Maildir/.LearnAsSpam/{cur,new}
sa-learn --sync

rm /home/user1/Maildir/.LearnAsSpam/{cur,new}/*
rm /home/user2/Maildir/.LearnAsSpam/{cur,new}/*
rm /home/user3/Maildir/.LearnAsSpam/{cur,new}/*

>> Once upon a time I used a third-party set of rules that could be
>> updated once in a while. Is that still around and is it worth it?
>
> Actually, there are so many SA supplies a specific tool to update them:
> sa-update.
>
> Regularly scheduled, sa-update may update the "stock" SA ruleset, as well as
> third-party, sa-update-compatible ones.

I ran sa-update before but I will run it occasionally in the future
and see if the "stock" SA ruleset can do the job before I seek out a
third party ruleset.

> Are you quitting the Java mess to enter into the Perl one? ;)

Every language has it's niche. Filtering SPAM seems like the ideal
task for the Pathologically Eclectic Rubbish Lister.

Mike

-- 
Michael B Allen
Java Active Directory Integration
http://www.ioplex.com/


Re: Basic Setup Questions

2010-06-27 Thread RW
On Sun, 27 Jun 2010 20:59:41 +0300
Jari Fredriksson  wrote:

> sa-learn -u username
> should do the trick, of am I wrong? I use it that way.

That's for SQL. 


Re: Basic Setup Questions

2010-06-27 Thread Jari Fredriksson
On 27.6.2010 19:55, Giampaolo Tomassoni wrote:
>>> I have LearnAsSpam IMAP folders for everyone to drag spam that get's
>>> through into. How can I run sa-learn so that it builds a /single/
>>> database from all of these folders and so that spamd uses that single
>>> database for scoring everyone's mail?
>>
>> Huh, using spamd --nouser-config ?
> 
> Sorry, I read "spamd", not sa-learn...
> 
> I use the trick or running sa-learn via su, specifying the user owning the
> db. Something like:
> 
>   su -s /bin/sh -c '/usr/bin/sa-learn ...' - TheDbOwningUser
> 
> However, the su option may be unavailable to your IMAP server. If this is
> the case, instead try specifying the full path to the db via the --dbpath
> switch, provided db permission are correctly set.
> 

sa-learn -u username
should do the trick, of am I wrong? I use it that way.

-- 
http://www.iki.fi/jarif/
I use PGP. If there is an incompatibility problem with your mail
client, please contact me.

You will overcome the attacks of jealous associates.



signature.asc
Description: OpenPGP digital signature


Does spamd support ipv6 yet?

2010-06-27 Thread Dan Mahoney, System Admin
I previously asked this question and was told the best answer might be to 
wait for 3.3.


Was there ever support ratified for ipv6 including proper -A ipv6 access 
lists, and proper ability to listen on both the ipv6 default and the v4 
default at the same time, when specifying -i?


I'm not sure which bugs to look at to ascertain this.

-Dan

--

Dan Mahoney
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---



RE: Basic Setup Questions

2010-06-27 Thread Giampaolo Tomassoni
> > I have LearnAsSpam IMAP folders for everyone to drag spam that get's
> > through into. How can I run sa-learn so that it builds a /single/
> > database from all of these folders and so that spamd uses that single
> > database for scoring everyone's mail?
> 
> Huh, using spamd --nouser-config ?

Sorry, I read "spamd", not sa-learn...

I use the trick or running sa-learn via su, specifying the user owning the
db. Something like:

su -s /bin/sh -c '/usr/bin/sa-learn ...' - TheDbOwningUser

However, the su option may be unavailable to your IMAP server. If this is
the case, instead try specifying the full path to the db via the --dbpath
switch, provided db permission are correctly set.

Giampaolo



RE: Basic Setup Questions

2010-06-27 Thread Giampaolo Tomassoni
> Hello,
> 
> I have just setup spamassassin. A lot of spam is getting filtered. But
> a lot is not.
> 
> What are the prevailing additional steps for improving filtering?
> 
> Is using bayes worth it?

Generally yes. However, it needs training before being reliable.


> My default config does not appear to be using bayes. How do I enable
> it?

use_bayes and bayes_auto_learn are on by default.


> The documentation simply says "run sa-learn". Does the creation of
> the bayes db files effectively enable bayes?

No. You also need to "teach" enough ham and spam tokens to Bayes. By
default, you should train bayes with at least 200 ham messages and 200 spam
messages. At that point, you should start seeing bayes scoring your
messages.


> I have LearnAsSpam IMAP folders for everyone to drag spam that get's
> through into. How can I run sa-learn so that it builds a /single/
> database from all of these folders and so that spamd uses that single
> database for scoring everyone's mail?

Huh, using spamd --nouser-config ? 


> Once upon a time I used a third-party set of rules that could be
> updated once in a while. Is that still around and is it worth it?

Actually, there are so many SA supplies a specific tool to update them:
sa-update.

Regularly scheduled, sa-update may update the "stock" SA ruleset, as well as
third-party, sa-update-compatible ones.


> 
> Mike

Are you quitting the Java mess to enter into the Perl one? ;)

Giampaolo



Basic Setup Questions

2010-06-27 Thread Michael B Allen
Hello,

I have just setup spamassassin. A lot of spam is getting filtered. But
a lot is not.

What are the prevailing additional steps for improving filtering?

Is using bayes worth it?

My default config does not appear to be using bayes. How do I enable
it? The documentation simply says "run sa-learn". Does the creation of
the bayes db files effectively enable bayes?

I have LearnAsSpam IMAP folders for everyone to drag spam that get's
through into. How can I run sa-learn so that it builds a /single/
database from all of these folders and so that spamd uses that single
database for scoring everyone's mail?

Once upon a time I used a third-party set of rules that could be
updated once in a while. Is that still around and is it worth it?

Mike