Re: Pattern detection

2014-09-25 Thread Axb
On 09/26/2014 08:41 AM, flw...@eads.com.my wrote: hi Axb thank for the detail reply do you know what is the price for Cloudmark ? nope - but I do know that it's waayy more than I can afford :) https://www.cloudmark.com/en/trial/cloudmark-authority-for-spamassassin htt

Re: Pattern detection

2014-09-25 Thread flwong
hi Axb thank for the detail reply do you know what is the price for Cloudmark ? regards wong - Original Message - From: "Axb" To: Sent: Friday, September 26, 2014 2:02 PM Subject: Re: Pattern detection On 09/26/2014 07:41 AM, flw...@eads.com.my wrote: hi refering to http://e

Re: Pattern detection

2014-09-25 Thread Axb
On 09/26/2014 07:41 AM, flw...@eads.com.my wrote: hi refering to http://en.wikipedia.org/wiki/Anti-spam_techniques anyone know how this thing work " Recurrent Pattern Detection (RPD) software " or any open source i can refer to ? or any RPD plugin that related can install in spamassassin.?

Pattern detection

2014-09-25 Thread flwong
hi refering to http://en.wikipedia.org/wiki/Anti-spam_techniques anyone know how this thing work " Recurrent Pattern Detection (RPD) software " or any open source i can refer to ? or any RPD plugin that related can install in spamassassin.? thanks WONG

Re: Spam messages autolearned as ham

2014-09-25 Thread Daniel Staal
--As of September 25, 2014 11:13:16 AM -0400, Deeztek Support is alleged to have said: You *did* keep your initial Bayes training corpora, right? I have an account that I have used to sign up for everything under the sun over the past 10 years. It's a goldmine for spam. I figured I use that

Re: Spam messages autolearned as ham

2014-09-25 Thread Amir Caspi
On Sep 25, 2014, at 10:35 AM, Axb wrote: > imo, fresh spam is the best spam. I've got plenty... > Nowadays, we tend to reejct most good fodder with all kinds of methods at > SMTP level and what's left is often hardly enough to keep a bayes DB well fed. In my case, spam is quarantined but not

Re: Unsubscribe

2014-09-25 Thread Reindl Harald
Am 25.09.2014 um 22:53 schrieb Jari Fredriksson: > 25.09.2014, 13:13, Reindl Harald kirjoitti: >> Am 25.09.2014 um 05:59 schrieb Shankar: >> >> here you go >> >> list-unsubscribe: >> >> don't send unsubscribe to the list >> not here and not on any

Re: Unsubscribe

2014-09-25 Thread Jari Fredriksson
25.09.2014, 13:13, Reindl Harald kirjoitti: > Am 25.09.2014 um 05:59 schrieb Shankar: > > here you go > > list-unsubscribe: > > don't send unsubscribe to the list > not here and not on any other mailing list > > sent to the list to hopefully save s

Re: Spam messages autolearned as ham

2014-09-25 Thread John Hardin
On Thu, 25 Sep 2014, Deeztek Support wrote: On 9/25/2014 1:25 PM, John Hardin wrote:. While your Postfix may be doing DNS blocklist checks on the sending MTA, I sincerely doubt that Postfix is parsing message bodies to pull out URI domains and checking them. That's what URIBL is. Is there

Re: Spam messages autolearned as ham

2014-09-25 Thread Reindl Harald
Am 25.09.2014 um 19:44 schrieb Deeztek Support: > On 9/25/2014 1:25 PM, John Hardin wrote:. >> >> While your Postfix may be doing DNS blocklist checks on the sending MTA, >> I sincerely doubt that Postfix is parsing message bodies to pull out URI >> domains and checking them. That's what URIBL is

Re: Spam messages autolearned as ham

2014-09-25 Thread Deeztek Support
On 9/25/2014 1:25 PM, John Hardin wrote:. > > While your Postfix may be doing DNS blocklist checks on the sending MTA, > I sincerely doubt that Postfix is parsing message bodies to pull out URI > domains and checking them. That's what URIBL is. Is there a place to configure the URIBLs that SA use

Re: Spam messages autolearned as ham

2014-09-25 Thread John Hardin
On Thu, 25 Sep 2014, Amir Caspi wrote: On Sep 25, 2014, at 8:51 AM, John Hardin wrote: You *did* keep your initial Bayes training corpora, right? Does it matter if you keep the initial corpora, or just that you train on known corpora, even if they are "fluid?" The "properly classified" p

Re: Spam messages autolearned as ham

2014-09-25 Thread John Hardin
On Thu, 25 Sep 2014, Deeztek Support wrote: as already suggested by John Hardin, fix URIBL_BLOCKED=0.001 "Also: URIBL_BLOCKED - you really want to set up a local recursive (non-forwarding) DNS server for SA so that your URIBL lookups will work, that might help a lot. " I can certainly try

Non-English spam

2014-09-25 Thread darxus
I had TexCat set up to detect non-English emails as spam: https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Plugin_TextCat.html But I apparently didn't have the score turned up high enough. The default score for its UNWANTED_LANGUAGE_BODY is 2.800. I just added this to my /etc/spam

Re: Spam messages autolearned as ham

2014-09-25 Thread Axb
On 09/25/2014 05:24 PM, Amir Caspi wrote: On Sep 25, 2014, at 8:51 AM, John Hardin wrote: You *did* keep your initial Bayes training corpora, right? Does it matter if you keep the initial corpora, or just that you train on known corpora, even if they are "fluid?" imo, fresh spam is the be

Re: Spam messages autolearned as ham

2014-09-25 Thread Reindl Harald
Am 25.09.2014 um 17:24 schrieb Amir Caspi: > On Sep 25, 2014, at 8:51 AM, John Hardin wrote: >> >> You *did* keep your initial Bayes training corpora, right? > > Does it matter if you keep the initial corpora, or just that you train on > known corpora, even if they are "fluid?" yes because you

Re: Spam messages autolearned as ham

2014-09-25 Thread Amir Caspi
On Sep 25, 2014, at 8:51 AM, John Hardin wrote: > > You *did* keep your initial Bayes training corpora, right? Does it matter if you keep the initial corpora, or just that you train on known corpora, even if they are "fluid?" --- Amir thumbed via iPhone

Re: Spam messages autolearned as ham

2014-09-25 Thread Reindl Harald
Am 25.09.2014 um 17:06 schrieb Deeztek Support: > I can certainly try that, however seeing that I'm implementing > block lists on the postfix level, wouldn't that double the lookups? first: if postscreen/postfix reject based on RBL score the message don't make it to SA at all and in case of a pro

Re: Spam messages autolearned as ham

2014-09-25 Thread Axb
On 09/25/2014 05:06 PM, Deeztek Support wrote: as already suggested by John Hardin, fix URIBL_BLOCKED=0.001 "Also: URIBL_BLOCKED - you really want to set up a local recursive (non-forwarding) DNS server for SA so that your URIBL lookups will work, that might help a lot. " I can certainly try

Re: Spam messages autolearned as ham

2014-09-25 Thread Deeztek Support
On 9/25/2014 10:51 AM, John Hardin wrote: If BAYES_00 hits on a spam, that indicates training issues. I understand. Since you're reporting problems with autolearn, that's not at all surprising. Your bayes database is probably polluted. You are probably going to have to wipe and retrain yo

Re: Spam messages autolearned as ham

2014-09-25 Thread Deeztek Support
thoughts? you changed a score and SA did what you told it to. I changed it as per the suggestion of Matus UHLAR - fantomas What are you trying to achieve (other than using the SA list as your changes log) Is that a trick question? I'm trying to ensure that spam messages are indeed tagge

Re: Spam messages autolearned as ham

2014-09-25 Thread John Hardin
On Thu, 25 Sep 2014, Deeztek Support wrote: On 9/25/2014 9:26 AM, Deeztek Support wrote: On 9/25/2014 6:31 AM, Matus UHLAR - fantomas wrote: > On 24.09.14 14:03, Deeztek Support wrote: > > score BAYES_000.000 > > why 0? current is -1.5 without and -1.9 with network checks... Do you

Re: Spam messages autolearned as ham

2014-09-25 Thread John Hardin
On Thu, 25 Sep 2014, Axb wrote: On 09/25/2014 03:26 PM, Deeztek Support wrote: On 9/25/2014 6:31 AM, Matus UHLAR - fantomas wrote: > On 24.09.14 14:03, Deeztek Support wrote: > > score BAYES_000.000 > > why 0? current is -1.5 without and -1.9 with network checks... Do you mean that

Re: Spam messages autolearned as ham

2014-09-25 Thread Axb
On 09/25/2014 04:02 PM, Deeztek Support wrote: I went ahead and set BAYES_00 to -1.9 and I just received a spam message with these headers: X-Spam-Status: No, score=0.204 tagged_above=-999 required=0.6 tests=[BAYES_00=-1.9, DCC_CHECK=1.1, FROM_STARTS_WITH_NUMS=0.738, RP_MATCHES_RCVD=-0

Re: Spam messages autolearned as ham

2014-09-25 Thread Reindl Harald
Am 25.09.2014 um 16:02 schrieb Deeztek Support: > On 9/25/2014 9:26 AM, Deeztek Support wrote: >> On 9/25/2014 6:31 AM, Matus UHLAR - fantomas wrote: >> > On 24.09.14 14:03, Deeztek Support wrote: >> >> score BAYES_000.000 >> > >> > why 0? current is -1.5 without and -1.9 with network chec

Re: Spam messages autolearned as ham

2014-09-25 Thread Deeztek Support
On 9/25/2014 9:26 AM, Deeztek Support wrote: On 9/25/2014 6:31 AM, Matus UHLAR - fantomas wrote: > On 24.09.14 14:03, Deeztek Support wrote: >> score BAYES_000.000 > > why 0? current is -1.5 without and -1.9 with network checks... Do you mean that the default is supposed to be -1.5 witho

Re: Spam messages autolearned as ham

2014-09-25 Thread Axb
On 09/25/2014 03:26 PM, Deeztek Support wrote: On 9/25/2014 6:31 AM, Matus UHLAR - fantomas wrote: > On 24.09.14 14:03, Deeztek Support wrote: >> score BAYES_000.000 > > why 0? current is -1.5 without and -1.9 with network checks... Do you mean that the default is supposed to be -1.5 wit

Re: Spam messages autolearned as ham

2014-09-25 Thread Deeztek Support
On 9/25/2014 6:31 AM, Matus UHLAR - fantomas wrote: > On 24.09.14 14:03, Deeztek Support wrote: >> score BAYES_000.000 > > why 0? current is -1.5 without and -1.9 with network checks... Do you mean that the default is supposed to be -1.5 without networks tests and -1.9 with network tests?

Re: running spamassassin (or spamc) idempotently

2014-09-25 Thread James Michael Keller
On 09/24/2014 07:19 PM, Jason Haar wrote: On 25/09/14 11:02, Corey Hickey wrote: Hi, Lately I have been getting lots of spam that passes through when initially received, but which is detected as spam when I test it later. I guess the blacklists catch up to the spammers' new IPs, etc. We are so

Re: Spam messages autolearned as ham

2014-09-25 Thread Matus UHLAR - fantomas
On 24.09.14 14:03, Deeztek Support wrote: score BAYES_000.000 why 0? current is -1.5 without and -1.9 with network checks... X-Spam-Status: No, score=0.257 tagged_above=-999 required=0.6 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.653, SPF_

Re: Unsubscribe

2014-09-25 Thread Reindl Harald
Am 25.09.2014 um 05:59 schrieb Shankar: here you go list-unsubscribe: don't send unsubscribe to the list not here and not on any other mailing list sent to the list to hopefully save some "unsubscribe" posts in the future signature.asc D