Re: Must-Have Plugins?

2015-06-08 Thread Reindl Harald



Am 09.06.2015 um 05:03 schrieb Michael B Allen:

So I have had SA running for about 2 days on a very small site with a
handful of users. I've been running the default config just to see how
well it would do by itself. Unfortunately quite a lot of spam is
getting through. So far 40 of 142 spams have passed.

So my question is, what is the best way to improve things? Is there
any particular must-have plugins? What is the one thing I can do to a
default install that is going to give me the biggest return on
invested effort?


train your bayes, preferred a global one to benfit all users from the 
same training


BAYES_00 9125   73.91 %
BAYES_05  3062.47 %
BAYES_20  3282.65 %
BAYES_40  2852.30 %
BAYES_50 11499.30 %
BAYES_60  1080.87 %
BAYES_80   980.79 %
BAYES_95   920.74 %
BAYES_99  8546.91 %
BAYES_999 7816.32 %

DELIVERED   14631   92.37 %
DNSWL   13696   86.47 %
SPF  6633   41.88 %
SPF/DKIM WL  3392   21.41 %
SHORTCIRCUIT 3488   22.02 %
BLOCKED  14919.41 %

[sa-milt@mail-gw:~]$ spamfilter-blocked.sh  | grep "Jun  8" | wc -l
287




signature.asc
Description: OpenPGP digital signature


Must-Have Plugins?

2015-06-08 Thread Michael B Allen
So I have had SA running for about 2 days on a very small site with a
handful of users. I've been running the default config just to see how
well it would do by itself. Unfortunately quite a lot of spam is
getting through. So far 40 of 142 spams have passed.

So my question is, what is the best way to improve things? Is there
any particular must-have plugins? What is the one thing I can do to a
default install that is going to give me the biggest return on
invested effort?

Mike


Re: Cron /home/ler/bin/update-bayes.sh

2015-06-08 Thread Kevin A. McGrail

On 6/6/2015 1:55 PM, Bill Cole wrote:
work up a patch, Add an option to flag only uris prefixed with a 
protocol, document it well, implement the function where it is need, 
test it and submit it for inclusion.


My stream of time slices fit for coding doesn't even qualify as a 
stream. I'll be lucky if I can find the right point of attack for this 
this month, no idea when I'd actually be able to write anything worth 
submitting.
We are all volunteers.  But I hope we can agree there is a rhyme of 
reason to how things work with TLDs and URIs as implemented and 
hopefully you can cajole someone into working on this patch.


Regards,
KAM


Re: Better Post Processing

2015-06-08 Thread Lucio Chiappetti

On Sat, 6 Jun 2015, Marc Selig wrote:


I use a single folder for fresh spam.  When a user ...


Yes, we have a similar homegrown arrangement. It is a long time since I 
helped to set it up, so I may not remember all the details.


Essentially, all the spam tagged as such by spamassassin (running under an 
amavis milter on our two entrance mx's) is quarantined into a single 
folder. Single mean ONE FOR ALL users. Users never see such spam directly.


Such folder is rotated daily, and deleted after one week.

A crontab is run daily, and sends each user a "spam report" which reports 
for the quarantined messages the apparent origin, destination, relay and 
subject.


Users who read such report and find a message was incorrectly tagged as 
spam, apply to the system manager. This occurs very seldom. The sysman 
sends the message to the user, and moves it to a "ham" folder.


Users who instead receive residual spam (1-2/day/user ?), may voluntarily 
copy it to a folder "user.spam" in a common scratch area "spam".


A crontab takes care of feeding the ham and spam folders to sa-learn.

This has been working happily for several years (the last 4 of which with 
not much spam stopped by spamassassin because it is stopped by graylisting 
BEFORE).


--

Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy)
For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html

Do not like Firefox >=29 ?  Get Pale Moon !  http://www.palemoon.org