Re: Razor, spamassassin - network test

2009-08-02 Thread monolit
I am really sorry it was mistake - I was yesterday very tired. Back on-list. I'm not a personal help-line. When I use spamassassin -t -D razor2 /tmp/spam so I dont get the hash and so on but content analysis details...bayes clasification and so on. I expected message like debug: Razor is

Re: blacklisting a forger

2009-08-02 Thread mouss
Terry Carmen a écrit : On Sat, 1 Aug 2009 19:33:40 -0400 Terry Carmen te...@cnysupport.com wrote: The backscatter would not have been received, since the sender is on a number of RBLs. It's the IP address of the botnet PC that's on the RBLs, the backscatter doesn't come from there, it comes

Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
I read spamassassin docs... I found out the following: Sa-learn --spam Learn the input message(s) as spam. If you have previously learnt any of the messages as ham, SpamAssassin will forget them first, then re-learn them as spam. Alternatively, if you have previously learnt them as spam,

Re: SA-learn (spamassassin)

2009-08-02 Thread RW
On Sun, 2 Aug 2009 04:36:34 -0700 (PDT) monolit xmull...@gmail.com wrote: I changed the value on 1(I use this for testing and my self-learning its my homework). According to me - spam bayes learning was activated. When I use sa-learning so bayes learn that the mail is spam. And bayes learn

Re: Network Tests / Rule Files Directories

2009-08-02 Thread Karsten Bräckelmann
On Sat, 2009-08-01 at 18:15 -0700, Stefan Malte Schumacher wrote: Evidence that it's not working? Show us some SA headers. In this case, a spam sample that triggered DCC, cause the Report header does show the rule's score. Hmm, I wasn't clear enough. :) I meant an identified spam, where

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 02:00 +0100, RW wrote: On Sun, 02 Aug 2009 01:42:21 +0200 Karsten Bräckelmann wrote: when I learn bayes by hand (sa-learn --spam --file mail) that this mail is spam? I have explicit set in local.cf bayes_min_spam_num 1. This means that for bayes is sufficient one

Re: SA-learn (spamassassin)

2009-08-02 Thread RW
On Sun, 02 Aug 2009 17:15:52 +0200 Karsten Bräckelmann guent...@rudersport.de wrote: On Sun, 2009-08-02 at 02:00 +0100, RW wrote: On Sun, 02 Aug 2009 01:42:21 +0200 Karsten Bräckelmann wrote: It's a counter-measure against bad learning, to force at least some MINIMAL manual training,

Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
Getting kind of a headache, trying to wrap my head around this confusing mess. Anyway, here's my shot at this. On Sun, 2009-08-02 at 03:31 -0700, an anonymous Nabble user wrote: When I use spamassassin -t -D razor2 /tmp/spam so I dont get the hash and so on but content analysis

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 18:31 +0100, RW wrote: AFAIK it doesn't affect autoleaning at all, bayes_min_spam_num bayes_min_ham_num control when scoring starts. Well, it *does* nonetheless. *shrug* If you read back you'll see that that's consistent with what I wrote and the opposite of

Re: Razor, spamassassin - network test

2009-08-02 Thread monolit
I understand that I must read whole output(message(TOP message)). But the output this command is very fast and it stop at the end. I dont catch TOP of message. I tried | more switch but it didint help. I tried redirecting output to the file but it doesnt work. The file was empty:( I dont know how

Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 11:17 -0700, monolit wrote: I understand that I must read whole output(message(TOP message)). But the output this command is very fast and it stop at the end. I dont catch TOP of message. I tried | more switch but it didint help. I tried redirecting output to the file but

Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
FROM SA WWW bayes_min_ham_num (Default: 200) bayes_min_spam_num (Default: 200) To be accurate, the Bayes system does not activate until a certain number of ham (non-spam) and spam have been learned. The default is 200 of each ham and spam, but you can tune these up or down with these two

Re: SA-learn (spamassassin)

2009-08-02 Thread me
On Sun, 2 Aug 2009 11:53:53 -0700 (PDT), monolit xmull...@gmail.com wrote: What is strange when I use SA-LEARN so database dont expand the size, but the time of modification is the same when I sa-learn started. question is ?

Re: Razor, spamassassin - network test

2009-08-02 Thread monolit
Your command works! I found in spamassassin -D razor2 sample.msg 21 | less message the following: check[9444]: [ 6] a=ce=4ep4=7542-10s=4uO_brp3_KWEDuqMYXBVHI-4-FwA But I dont know how to recognize that is a signature(hash) of the mail. In the old version it was clearly marked for example:

Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
Question is logical. When SA learnt new spam/ham so SA have to write new info to the database and I think that database have to increase size. If you have for example *.doc file and you modify it. You add several words - *.doc will be bigger(increase his size). -- View this message in context:

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 11:53 -0700, an anonymous Nabble user wrote: I have theory ...I know you will think thats bad but I tried explain how I understand SA documentation. When I set the bayes_min_spam_num 1 so it means that Bayes learn system will be activate. And now for example: I got As I

Re: SA-learn (spamassassin)

2009-08-02 Thread Benny Pedersen
On Sun, 2 Aug 2009 13:20:41 -0700 (PDT), monolit xmull...@gmail.com wrote: Question is logical. so are google :) When SA learnt new spam/ham so SA have to write new info to the database and I think that database have to increase size. no, my bayes db is around 150M, but all my mail is in

Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
I'm starting to seriously wonder, what your homework actually is about. On Sun, 2009-08-02 at 13:05 -0700, an anonymous Nabble user wrote: Your command works! I found in spamassassin -D razor2 sample.msg 21 | less message the following: check[9444]: [ 6]

Re: SA-learn (spamassassin)

2009-08-02 Thread monolit
To Benny Pedersen: I understand your explanation about increasing of spamassassin database. Your example with md5 is clearly. Ok thank you very much! To by Karsten Bräckelmann-2: I want to apologize for my approach - I use Ubuntu and other forums because I am hopeless because my homework was

Re: SA-learn (spamassassin)

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 14:43 -0700, an anonymous Nabble user wrote: To by Karsten Bräckelmann-2: I want to apologize for my approach - I use Ubuntu and other forums because I am hopeless because my homework was install configure and run antispam(spamassassin, ClamAV, Clamsmtp,razor, postfix).

Re: SA-learn (spamassassin)

2009-08-02 Thread Matt Kettler
monolit wrote: Question is logical. When SA learnt new spam/ham so SA have to write new info to the database and I think that database have to increase size. If you have for example *.doc file and you modify it. You add several words - *.doc will be bigger(increase his size). The database