RE: local.cf auto learn configs and defaults?

2006-09-29 Thread Bowie Bailey
Email Lists wrote:
> ->
> -> You can clear the AWL for a sender like this:
> ->
> -> spamassassin --remove-addr-from-whitelist [EMAIL PROTECTED]
> ->
> -> ([EMAIL PROTECTED] is the sender)
> ->
> -> Make sure you do this as the user who is having the problem.
> ->
> -> > Thanks and kind regards
> ->
> -> If this doesn't help, post the headers from one of the messages so
> -> that we can see which rules are hitting.
> ->
> -> --
> -> Bowie
> 
> Can this removal be a wildcard?
> 
> [EMAIL PROTECTED]
> 
> Remember the test rule created was for a whole functional domain

I think it has to be done for each address (and also for each
recipient).

The good news is that the AWL will gradually fix itself.  Once these
emails are no longer receiving high scores (before the AWL rule), the
AWL will start lowering it's score back to reasonable levels.

-- 
Bowie


RE: local.cf auto learn configs and defaults?

2006-09-28 Thread Email Lists
-> 
-> You can clear the AWL for a sender like this:
-> 
-> spamassassin --remove-addr-from-whitelist [EMAIL PROTECTED]
-> 
-> ([EMAIL PROTECTED] is the sender)
-> 
-> Make sure you do this as the user who is having the problem.
-> 
-> > Thanks and kind regards
-> 
-> If this doesn't help, post the headers from one of the messages so
-> that we can see which rules are hitting.
-> 
-> --
-> Bowie

Can this removal be a wildcard? 

[EMAIL PROTECTED]

Remember the test rule created was for a whole functional domain

 - rh


--
Robert - Abba Communications
   Computer & Internet Services
 (509) 624-7159 - www.abbacomm.net



RE: local.cf auto learn configs and defaults?

2006-09-28 Thread Bowie Bailey
Email Lists wrote:
> >
> > Its probably an AWL score, but without showing us a list of the
> > tests hit on one of these emails all we can do is throw straws in
> > the air and guess.
> > Loren
> >
> 
> Ok, a box of straws will be on the way immediately...
> 
> Any special colors?   ;->
> 
> I appreciate your time and that of Daniel T. Staal so far...
> 
> ...as it confirms what I thought... yet I still needed to ask
> 
> What is AWL?  :-) yeah, ill search yet am certainly looking for
> insight. 

AWL is the Auto White List (although it would be more properly called a
score averager).  What it does is weight the spam scores towards the
sender's previous scores.  In this case, it may be providing a rather
high positive score to the emails since your rule caused him to have
high scores previously.

If you look at the message headers, you should see AWL listed if this
is what is causing the high score.

> Oh, how do I properly blow away (from the command line) any saved
> settings that SA or sa-learn or whatever is looking at that is has
> learned without frying my systems?

You can clear the AWL for a sender like this:

spamassassin --remove-addr-from-whitelist [EMAIL PROTECTED]

([EMAIL PROTECTED] is the sender)

Make sure you do this as the user who is having the problem.

> Thanks and kind regards

If this doesn't help, post the headers from one of the messages so
that we can see which rules are hitting.

-- 
Bowie


RE: local.cf auto learn configs and defaults?

2006-09-28 Thread Email Lists
-> 
-> Its probably an AWL score, but without showing us a list of the tests hit
-> on
-> one of these emails all we can do is throw straws in the air and guess.
-> 
-> Loren
-> 

Ok, a box of straws will be on the way immediately...

Any special colors?   ;->

I appreciate your time and that of Daniel T. Staal so far...

...as it confirms what I thought... yet I still needed to ask

What is AWL?  :-) yeah, ill search yet am certainly looking for insight.

Oh, how do I properly blow away (from the command line) any saved settings
that SA or sa-learn or whatever is looking at that is has learned without
frying my systems?

Thanks and kind regards

 - rh

--
Robert - Abba Communications
   Computer & Internet Services
 (509) 624-7159 - www.abbacomm.net



Re: local.cf auto learn configs and defaults?

2006-09-28 Thread Loren Wilton

After awhile I removed all of it and restarted everything yet the test
domain I did this with at first is still getting really high spam scores 
and

is causing me a problem cause it is a secondary mail account live domain
etc.


Its probably an AWL score, but without showing us a list of the tests hit on 
one of these emails all we can do is throw straws in the air and guess.


   Loren



Re: local.cf auto learn configs and defaults?

2006-09-28 Thread Daniel T. Staal
On Thu, September 28, 2006 1:08 pm, Email Lists said:

> #   Use Bayesian classifier (default: 1)
> #
> # use_bayes 1
>
> #   Bayesian classifier auto-learning (default: 1)
> #
> # bayes_auto_learn 1
>
> Please notice that they are commented out and have never been put in
> service.

Since those are the default values, commenting them out doesn't have much
effect.  You would have to uncomment and change them to deactivate those
features.

Daniel T. Staal

---
This email copyright the author.  Unless otherwise noted, you
are expressly allowed to retransmit, quote, or otherwise use
the contents for non-commercial purposes.  This copyright will
expire 5 years after the author's death, or in 30 years,
whichever is longer, unless such a period is in excess of
local copyright law.
---



RE: local.cf auto learn configs and defaults?

2006-09-28 Thread Email Lists
-> I placed with some rules some time back because I didn't like to see list
-> emails from this one person with very poor judgement and taste in his
-> signature lines decisions...
-> 
-> Looked like this and I added them to my local.cf
-> 
-> #
->header LOCAL_DEMONSTRATION_ALL  ALL =~ /thatjerksdomsin\.com/i
->score LOCAL_DEMONSTRATION_ALL   9.9
-> #
-> 
-> I did a test domain first and it worked. Then I went live with the real
-> domain.
-> 
-> After awhile I removed all of it and restarted everything yet the test
-> domain I did this with at first is still getting really high spam scores
-> and
-> is causing me a problem cause it is a secondary mail account live domain
-> etc.
-> 
-> Also, in my local.cf
-> 
-> #   Use Bayesian classifier (default: 1)
-> #
-> # use_bayes 1
-> 
-> #   Bayesian classifier auto-learning (default: 1)
-> #
-> # bayes_auto_learn 1
-> 
-> Please notice that they are commented out and have never been put in
-> service.
-> 
-> What I am wondering, is this though, how do I check besides here to see
-> if
-> bayes or auto_learn is on somewhere else
-> 
-> Would I just look at the headers? Is that the only way and the only other
-> place to look?
-> 
-> I know something is learned and stored somewhere.
-> 
-> How do I clear this? Can I do it selectively or does it all have to be
-> dusted. I never knowingly turned on any learning.
-> 
-> Let me know if you need more info...
-> 
-> Thanks and kind regards
-> 
->  - rh

I usually do not reply to my own yet I have more data/info for you

In /home/spamd/.spamassassin it looks like this

-rw---  1 spamd spamd 10473472 Sep 28 10:20 auto-whitelist
-rw---  1 spamd spamd 3624 Sep 28 10:20 bayes_journal
-rw---  1 spamd spamd  5177344 Sep 28 10:20 bayes_seen
-rw---  1 spamd spamd  5386240 Sep 28 10:20 bayes_toks

So obviously something is happening. I have used spamassassin for a long
time, it is just now that I am trying to learn more and get into the nuts
and bolts for all involved.

Any pointers to what to search for on google or where to make changes would
be appreciated.

I know where the spamassassin site it, I am just not familiar with the
terminologies so I can do better searching and researching please.

Thanks again

 - rh

--
Robert - Abba Communications
  Computer & Internet Services
 (509) 624-7159 - www.abbacomm.net