bayes,imp and virtual users

2009-03-04 Thread Seba Mueld
Hi, I'm using SA 3.2.5 with Horde/IMP ans Postfix 2.5.5 with virtual users. My config is similar like this: http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix I want to use bayes (SQL) auto learn with virtual users and this works as long as clients send through SMTP and an real

blacklist_from

2009-03-04 Thread Geert Batsleer
all, I'm trying to blacklist email frcm '*Vegas Club Casino' *Hi wich is being sent from different email adressess but always with the same 'From' in the header. Tried putting it in local.cf as blacklist_from Vegas Club Casino but those mails keep coming. How can I filter just on the from

Re: blacklist_from

2009-03-04 Thread Matus UHLAR - fantomas
On 04.03.09 10:10, Geert Batsleer wrote: I'm trying to blacklist email frcm '*Vegas Club Casino' *Hi wich is being sent from different email adressess but always with the same 'From' in the header. Tried putting it in local.cf as blacklist_from Vegas Club Casino but those mails keep

Re: blacklist_from

2009-03-04 Thread Yet Another Ninja
On 3/4/2009 10:18 AM, Matus UHLAR - fantomas wrote: On 04.03.09 10:10, Geert Batsleer wrote: I'm trying to blacklist email frcm '*Vegas Club Casino' *Hi wich is being sent from different email adressess but always with the same 'From' in the header. Tried putting it in local.cf as

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread Matus UHLAR - fantomas
Le 03/03/2009 17:42, Matus UHLAR - fantomas a écrit : I have been already thinking about possibility to combine every two rules and do a masscheck over them. Then, optionally repeating that again, skipping duplicates. Finally gather all rules that scored=0.5 ||=-0.5 - we could have

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread Justin Mason
On Wed, Mar 4, 2009 at 00:43, Marc Perkel m...@perkel.com wrote: LuKreme wrote: On Mar 3, 2009, at 10:06, John Wilcock j...@tradoc.fr wrote: Le 03/03/2009 17:42, Matus UHLAR - fantomas a écrit : I have been already thinking about possibility to combine every two rules and do a masscheck

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread John Wilcock
Le 04/03/2009 10:38, Matus UHLAR - fantomas a écrit : I should note that some policy rules and rules with manually updated scores (SPF_PASS, BAYES_*) may need to be exempted from this. We don't want SPF_PASS to generate high positive score, do we? It could probably be argued both ways. There

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread decoder
Justin Mason wrote: So you're volunteering to code it up, then? ;) I was planning to do at least some brainstorming+experiements as to what learning methods would seem suitable and how well the method performs, whenever I have time again. Unless someone else did that already? smime.p7s

Re: Bye Bye Bayes

2009-03-04 Thread Kai Schaetzl
LuKreme wrote on Tue, 3 Mar 2009 19:02:06 -0700: How is it the same? Already read messages in inbox means the user has accepted those messages without trashing them or junking them. and the message may not have been learned by score. If you can make sure that your users *really* delete or

Re: Bye Bye Bayes

2009-03-04 Thread John Hardin
On Tue, 3 Mar 2009, LuKreme wrote: On Mar 3, 2009, at 17:07, John Hardin jhar...@impsec.org wrote: On Tue, 3 Mar 2009, LuKreme wrote: I am considering the following: Autolearn read mail in the inbox as ham Autolearn mail in .Junk and .SPAM as spam This is pretty east with maildir.

Re: Bye Bye Bayes

2009-03-04 Thread John Hardin
On Wed, 4 Mar 2009, Kai Schaetzl wrote: LuKreme wrote on Tue, 3 Mar 2009 19:02:06 -0700: How is it the same? Already read messages in inbox means the user has accepted those messages without trashing them or junking them. If you can make sure that your users *really* delete or move spam to

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread Marc Perkel
Matus UHLAR - fantomas wrote: I should note that some policy rules and rules with manually updated scores (SPF_PASS, BAYES_*) may need to be exempted from this. We don't want SPF_PASS to generate high positive score, do we? The idea of all this is that we might discover things like

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread Marc Perkel
Justin Mason wrote: On Wed, Mar 4, 2009 at 00:43, Marc Perkel m...@perkel.com wrote: LuKreme wrote: On Mar 3, 2009, at 10:06, John Wilcock j...@tradoc.fr wrote: Le 03/03/2009 17:42, Matus UHLAR - fantomas a écrit : I have been already thinking about possibility to

Dealing with low scoring spam - tighter MTA integration [was: 2 + 2 != 4 - Spamassassin needs a new paradigm]

2009-03-04 Thread Andrzej Adam Filip
Karsten Bräckelmann guent...@rudersport.de wrote: On Tue, 2009-03-03 at 08:32 -0800, Marc Perkel wrote: Spamassassin works by adding up points. Rule A is 2 points, Rule B is 2 points therefore the score is 4 points. But is this the best way to score? I don't think so. [...] Anyhow - just

Re: Bye Bye Bayes

2009-03-04 Thread Kai Schaetzl
John Hardin wrote on Wed, 4 Mar 2009 06:17:16 -0800 (PST): (Oops! Disk failure! Well, that was trash, you can afford to lose that.) thanks for the laugh :-) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: Dealing with low scoring spam - tighter MTA integration [was: 2 + 2 != 4 - Spamassassin needs a new paradigm]

2009-03-04 Thread Karsten Bräckelmann
On Wed, 2009-03-04 at 16:02 +0100, Andrzej Adam Filip wrote: Karsten Bräckelmann guent...@rudersport.de wrote: About 98-99% of my spam in-stream scores as high, that any such proposal results in a useless increase of the score. The problem lies with the LOW scoring spam. Alas, these do

Re: Bye Bye Bayes

2009-03-04 Thread Dave Pooser
I used to have a couple of users who treated their Trash folder as long-term read-message storage. I have a user like that at $DAYJOB. I used to ask him if he kept his car title and other important documents in the wastebasket under his desk at home. -- Dave Pooser Cat-Herder-in-Chief,

Re: Dealing with low scoring spam - tighter MTA integration

2009-03-04 Thread Andrzej Adam Filip
Karsten Bräckelmann guent...@rudersport.de wrote: On Wed, 2009-03-04 at 16:02 +0100, Andrzej Adam Filip wrote: Karsten Bräckelmann guent...@rudersport.de wrote: About 98-99% of my spam in-stream scores as high, that any such proposal results in a useless increase of the score. The

Re: Bye Bye Bayes

2009-03-04 Thread Martin Gregorie
On Wed, 2009-03-04 at 16:31 +0100, Kai Schaetzl wrote: John Hardin wrote on Wed, 4 Mar 2009 06:17:16 -0800 (PST): (Oops! Disk failure! Well, that was trash, you can afford to lose that.) thanks for the laugh :-) How many of you have seen the BOFH (Bastard Operator From Hell) stories?

Re: Bye Bye Bayes

2009-03-04 Thread Kai Schaetzl
Karsten Bräckelmann wrote on Wed, 04 Mar 2009 02:25:51 +0100: That's bayes_auto_learn_threshold_spam and nonspam respectively, I guess? Keep in mind that threshold is not the actual score, so you aren't learning all spam with a score of 8+ then. Right, I know. That's where the spam quarantine

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread decoder
Marc Perkel wrote: Justin Mason wrote: So you're volunteering to code it up, then? ;) --j. I would if I were any good at perl. I think we should evaluate if the suggested technique works and performs better or is at least of some benefit, before trying to implement it properly

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread LuKreme
On 4-Mar-2009, at 02:38, Matus UHLAR - fantomas wrote: LuKreme wrote: It sounds like a really good idea to me, and also like the most reasonable way to manage self-learning meta rules. On 03.03.09 16:43, Marc Perkel wrote: It seems to me that the consensus is that it's worth a try. I don't

Re: Dealing with low scoring spam - tighter MTA integration

2009-03-04 Thread John Hardin
On Wed, 4 Mar 2009, Andrzej Adam Filip wrote: This would be an entirely different application, not SA, wouldn't it? It can be developed using the same spam score logic, based subset of all tests requiring only the subset of final data available during classic run. So in other words

Re: Dealing with low scoring spam - tighter MTA integration

2009-03-04 Thread Andrzej Adam Filip
John Hardin jhar...@impsec.org wrote: On Wed, 4 Mar 2009, Andrzej Adam Filip wrote: This would be an entirely different application, not SA, wouldn't it? It can be developed using the same spam score logic, based subset of all tests requiring only the subset of final data available during

Re: Bye Bye Bayes

2009-03-04 Thread LuKreme
On 4-Mar-2009, at 07:06, John Hardin wrote: On Tue, 3 Mar 2009, LuKreme wrote: On Mar 3, 2009, at 17:07, John Hardin jhar...@impsec.org wrote: On Tue, 3 Mar 2009, LuKreme wrote: I am considering the following: Autolearn read mail in the inbox as ham Autolearn mail in .Junk and .SPAM as

Please remove li...@billmerriam.com

2009-03-04 Thread Kai Schaetzl
Could the list-admin please remove li...@billmerriam.com from the list as it bounces all messages back to the original sender? Thanks! (BTW: there's no list-admin address published anywhere.) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services:

SpamAssassin Doesn't Appear to be working

2009-03-04 Thread JasonHirsh
I have a freebsd 7.0 RC3 server running postfix amavisd-new clamavd and SpamAssassin... Having just upgraded ports I believe they are all current releases In this set up I am lead top believe that Amavisd-new handles the SA config but I did not see a process for spamd so i enabled in rc.conf.

Re: SpamAssassin Doesn't Appear to be working

2009-03-04 Thread Mark Martinec
Jason, I have a freebsd 7.0 RC3 server running postfix amavisd-new clamavd and SpamAssassin... Having just upgraded ports I believe they are all current releases In this set up I am lead top believe that Amavisd-new handles the SA config but I did not see a process for spamd so i enabled

Re: More Google group messages

2009-03-04 Thread Private
Kai Schaetzl wrote: Albert E. Whale wrote on Sun, 01 Mar 2009 12:51:36 -0500: Our Email is Filtered using the SPAMZapper. More than 50 Million connections filtered and still counting. SPAMZapper stops Spam, Viruses, and other Malware before it reaches your PC. Doesn't this

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread decoder
decoder wrote: Justin Mason wrote: So you're volunteering to code it up, then? ;) I was planning to do at least some brainstorming+experiements as to what learning methods would seem suitable and how well the method performs, whenever I have time again. Unless someone else did that

Re: Dealing with low scoring spam - tighter MTA integration [was: 2 + 2 != 4 - Spamassassin needs a new paradigm]

2009-03-04 Thread SM
At 07:02 04-03-2009, Andrzej Adam Filip wrote: May be spamassassin should create set of tests intended for use before replying RCPT TO: in SMTP session? [ test based on: sending IP address, envelope sender, envelope recipient, and name in helo/ehlo ] SpamAssassin processes the message and

Re: Dealing with low scoring spam - tighter MTA integration [was: 2 + 2 != 4 - Spamassassin needs a new paradigm]

2009-03-04 Thread Kenneth Porter
--On Wednesday, March 04, 2009 4:02 PM +0100 Andrzej Adam Filip a...@onet.eu wrote: May be spamassassin should create set of tests intended for use before replying RCPT TO: in SMTP session? Check out http://mimedefang.org/ MIMEDefang includes SA integration.

Re: 2 + 2 != 4 - Spamassassin needs a new paradigm

2009-03-04 Thread Marc Perkel
decoder wrote: decoder wrote: Justin Mason wrote: So you're volunteering to code it up, then? ;) I was planning to do at least some brainstorming+experiements as to what learning methods would seem suitable and how well the method performs, whenever I have time again. Unless someone

Re: Dealing with low scoring spam - tighter MTA integration

2009-03-04 Thread Andrzej Adam Filip
Kenneth Porter sh...@sewingwitch.com wrote: --On Wednesday, March 04, 2009 4:02 PM +0100 Andrzej Adam Filip a...@onet.eu wrote: May be spamassassin should create set of tests intended for use before replying RCPT TO: in SMTP session? Check out http://mimedefang.org/ MIMEDefang includes