Re: Bayes expiration with Redis backend

2015-02-27 Thread Matteo Dessalvi
If classification makes sense, you're not getting FPs or tons of spam with BAYES_00 you have nothing to worry about. Sometimes you have to trust your gut feeling... don't let wild bayes theories misguide you...watch your logs, listen to your users and build up a feel for it. I will ce

Re: Bayes expiration with Redis backend

2015-02-27 Thread Mark Martinec
-learn reports the following: 0.000 0 3 0 non-token data: bayes db version 0.000 0 8437 0 non-token data: nspam 0.000 0 495000 0 non-token data: nham As stated here: search.cpan.org/dist/Mail-SpamAssassin/lib/Mail

Re: Bayes expiration with Redis backend

2015-02-27 Thread Axb
expiration of the bayesian data. sa-learn reports the following: 0.000 0 3 0 non-token data: bayes db version 0.000 0 8437 0 non-token data: nspam 0.000 0 495000 0 non-token data: nham As stated here: search.cpan.org/dist/Mail

Bayes expiration with Redis backend

2015-02-27 Thread Matteo Dessalvi
following: 0.000 0 3 0 non-token data: bayes db version 0.000 0 8437 0 non-token data: nspam 0.000 0 495000 0 non-token data: nham As stated here: search.cpan.org/dist/Mail-SpamAssassin/lib/Mail/SpamAssassin/BayesStore

Re: no BAYES checking

2015-02-26 Thread James
On 02/25/2015 10:03 PM, Dave Funk wrote: It looks like you either have a permissions problem or a confusion problem. Your run of 'sa-learn --dump magic' is looking at some Bayes which has enough ham/spam but what ever your spamassasin is looking at doesn't. Your 'sudo&#x

Re: no BAYES checking

2015-02-25 Thread Benny Pedersen
On February 26, 2015 3:36:02 AM John Hardin wrote: > Feb 25 21:07:55.366 [27839] dbg: bayes: not available for scanning, only 0 ham(s) in bayes DB < 200 > Why does it say not enough ham? Because you need to train ham *as well as* spam. How else will it be able to tell the difference

Re: no BAYES checking

2015-02-25 Thread Dave Funk
IS,HTML_MESSAGE,RDNS_DYNAMIC,T_OBFU_JPG_ATTACH autolearn=no version=3.3.2 $ sudo sa-learn --username=debian-spamd --dump magic 0.000 0 3 0 non-token data: bayes db version 0.000 0 5902 0 non-token data: nspam 0.000 0 4985

Re: no BAYES checking

2015-02-25 Thread John Hardin
On Wed, 25 Feb 2015, James wrote: I don't think I have the Bayesian filter working. You don't: Feb 25 21:07:55.366 [27839] dbg: bayes: not available for scanning, only 0 ham(s) in bayes DB < 200 Why does it say not enough ham? Because you need to train ham *as well as* s

no BAYES checking

2015-02-25 Thread James
CH autolearn=no version=3.3.2 $ sudo sa-learn --username=debian-spamd --dump magic 0.000 0 3 0 non-token data: bayes db version 0.000 0 5902 0 non-token data: nspam 0.000 0 4985 0 non-t

Re: bayes eval error

2015-02-22 Thread Reindl Harald
Am 22.02.2015 um 22:31 schrieb @lbutlr: On 22 Feb 2015, at 07:56 , Reindl Harald wrote: Am 22.02.2015 um 15:49 schrieb @lbutlr: plugin: eval failed: bayes: (in learn) locker: safe_lock: cannot create lockfile /home/kreme/.spamassassin/bayes.mutex: Permission denied (And yes, that is

Re: bayes eval error

2015-02-22 Thread @lbutlr
On 22 Feb 2015, at 07:56 , Reindl Harald wrote: > Am 22.02.2015 um 15:49 schrieb @lbutlr: >> plugin: eval failed: bayes: (in learn) locker: safe_lock: cannot create >> lockfile /home/kreme/.spamassassin/bayes.mutex: Permission denied >> >> (And yes, that is correct

Re: bayes eval error

2015-02-22 Thread Reindl Harald
Am 22.02.2015 um 15:49 schrieb @lbutlr: plugin: eval failed: bayes: (in learn) locker: safe_lock: cannot create lockfile /home/kreme/.spamassassin/bayes.mutex: Permission denied (And yes, that is correct, the spamassassin files in user’s home are not world read/writ) disable autolearning

Re: Uptick in spam (bayes stats script)

2015-02-22 Thread Reindl Harald
Am 22.02.2015 um 15:30 schrieb @lbutlr: On 21 Feb 2015, at 08:34 , LuKreme wrote: On Feb 18, 2015, at 6:20 AM, Reindl Harald wrote: That is a lot cleaner and more obvious, thank you for sharing I ran this just after log rotation and got div by zero errors, so here is a (nearly) compl

Re: Uptick in spam (bayes stats script)

2015-02-22 Thread @lbutlr
On 21 Feb 2015, at 08:34 , LuKreme wrote: > On Feb 18, 2015, at 6:20 AM, Reindl Harald wrote: >> >> > > That is a lot cleaner and more obvious, thank you for sharing I ran this just after log rotation and got div by zero errors, so here is a (nearly) completely pointless ‘fix’: BAYES_TOTAL=

Re: Uptick in spam (bayes stats script)

2015-02-21 Thread LuKreme
On Feb 18, 2015, at 6:20 AM, Reindl Harald wrote: > > That is a lot cleaner and more obvious, thank you for sharing -- Once again I teeter at the precipice of the generation gap.

Re: Backup of bayes database failed

2015-02-19 Thread RW
On Thu, 19 Feb 2015 09:27:12 +0100 Olivier CALVANO wrote: > Hi > > i want backup the bayes database of my spamassassin server but > impossible. > > On all server, that's finish at : > > locker: safe_unlock: lock on /var/spool/spamassassin/bayes.lock was > lost d

Backup of bayes database failed

2015-02-19 Thread Olivier CALVANO
Hi i want backup the bayes database of my spamassassin server but impossible. On all server, that's finish at : locker: safe_unlock: lock on /var/spool/spamassassin/bayes.lock was lost due to expiry at /usr/lib/perl5/vendor_perl/5.10.0/Mail/SpamAssassin/Locker/UnixNFSSafe.pm line 200. an

Re: Uptick in spam (bayes stats script)

2015-02-18 Thread Reindl Harald
-gw:~]$ bayes-stats.sh What is bayes-stats.sh? as simple shell script nicer version attached as plain-text file using now bash + bc + printf for % and formatting removed the su-calls by place it in a worker-dir and call that with "su" from a script in PATH, well output looks now

Re: why does SA without autolearn need bayes read-write?

2015-02-01 Thread RW
On Sat, 31 Jan 2015 16:46:28 +0100 Reindl Harald wrote: > according to the documentation *it is* a bug: That's just a wiki entry. > http://wiki.apache.org/spamassassin/SiteWideBayesSetup > Please note this directory needs to be RWX for all users that > SpamAssassin will be executed as, or R-

Re: why does SA without autolearn need bayes read-write?

2015-01-31 Thread Reindl Harald
bayes_learn_during_report 0 rsyslog.conf for now masks it: :msg, contains, "bayes db update ignored: Read-only file system" stop Am 29.01.2015 um 18:34 schrieb RW: On Wed, 28 Jan 2015 15:58:56 +0100 Reindl Harald wrote: * first: it is a bug to write/lock when auto_expire / auto_le

Bayes Corruption

2015-01-30 Thread Andrew Watson
Hi, Invoked through a plugin in KerioConnect SpamAssassin 3.3.1 Platform is CentOS 5.10 So, my Bayes.db is corrupt and out of curiosity I just wanted to take a look at it. I used SQLiteBrowser to do so. Now I have some questions about the bayes_token table: 1) Is there a reason why the id is n

Re: why does SA without autolearn need bayes read-write?

2015-01-29 Thread RW
e. On Wed, 28 Jan 2015 01:03:37 +0100 Reindl Harald wrote: > ... even if we decide to kill spam-spamles older than x > months it needs to be done properly to the 50% spam / 50% ham > ratio which is the reason the bayes works that good The ratio doesn't matter; it's a

Re: why does SA without autolearn need bayes read-write?

2015-01-29 Thread Reindl Harald
rvice "no reason /var can't be mounted read-only" does *not* suggest that * the initial post makes it pretty clear * it was even quoted by fantomas first reply on this thread * i made that clear multiple times Weitergeleitete Nachricht Betreff: Re: why does SA wi

Re: why does SA without autolearn need bayes read-write?

2015-01-29 Thread John Hardin
On Thu, 29 Jan 2015, Reindl Harald wrote: Am 29.01.2015 um 10:18 schrieb Matus UHLAR - fantomas: On 28.01.15 01:03, Reindl Harald wrote: > if understand you correctly we agree that there is no reason /var > can't be mounted read-only? I do not agree. The whole point of /var is to contain

Re: why does SA without autolearn need bayes read-write?

2015-01-29 Thread Reindl Harald
feats the whole purpose of /var. i am not talking about a own partition i am talking about a *systemd namespace* and the intention *not* have anything below /var writeable for a network facing service frankly - can we stop to dicuss left and right? i asked for not touch bayes from the spamd se

Re: why does SA without autolearn need bayes read-write?

2015-01-29 Thread Matus UHLAR - fantomas
On 27.01.15 18:49, Reindl Harald wrote: the intention of this *global bayes* is *not* to learn or expire anything - the implemented "remove from bayes" method is just remove the message from the corpus folder and type "sa-learn.sh rebuild" I believe it's much mor

Re: why does SA without autolearn need bayes read-write?

2015-01-29 Thread Matus UHLAR - fantomas
ities for you: - move BAYES to a database of any kind - set up SA to learn to journal, and use overlayfs for the journal (rememer to set bayes_journal_max_size big enough), droping it or syncing periodically -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish N

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Axb
On 01/28/2015 05:00 PM, Reindl Harald wrote: BTW it is not visible which users are core-developers on this list and which are not - until now i thought you are as example I am part of the dev team or as you say "core-developers" which doesn't mean I have to be a Perl monger. There's other task

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Reindl Harald
;ve deleted bayes_seen so bayes has lost it's record of what it has processed so it will relearn stuff you already fed it. no, i explained what happens in the part you stripped from the quote - it contains randomly complete message parts independent how often i delete *any file* in the use

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Reindl Harald
Am 28.01.2015 um 16:39 schrieb Axb: On 01/28/2015 03:58 PM, Reindl Harald wrote: * third: if you would be a smart upstream in case of a company admin asking for a change instead "write a patch" you could make a offer talking about money to include the change in the

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Axb
-- 1 sa-milt sa-milt 98 2014-08-21 17:47 user_prefs _ something here does NOT make sense 1.3 MB of seen against 40MB tokens. someone please correct me if I'm wrong: afaik, this probably means you've deleted bayes_seen so bayes has los

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Axb
On 01/28/2015 03:58 PM, Reindl Harald wrote: * third: if you would be a smart upstream in case of a company admin asking for a change instead "write a patch" you could make a offer talking about money to include the change in the next upstream version - we sponso

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Reindl Harald
Am 28.01.2015 um 16:24 schrieb Axb: On 01/28/2015 03:58 PM, Reindl Harald wrote: * first: it is a bug to write/lock when auto_expire / auto_learn is off bayes_seen is AFAIK relevant in context of sa-learn to not re-train the same messages again and again - and it has it's own bugs becau

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Axb
On 01/28/2015 03:58 PM, Reindl Harald wrote: * first: it is a bug to write/lock when auto_expire / auto_learn is off bayes_seen

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Martin Gregorie
On Wed, 2015-01-28 at 15:04 +0100, Reindl Harald wrote: > no need for mount own partitions on recent linux systems > that's what namespaces are for and systemd has easy interfaces > Fair enough: I thought you were talking about some sort of site-wide read-only mount, but using systemd to limit the

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Reindl Harald
Am 28.01.2015 um 15:46 schrieb Axb: On 01/28/2015 03:18 PM, Kevin A. McGrail wrote: On 1/28/2015 9:04 AM, Reindl Harald wrote: my main point is that i don't want the locking IO when nothing then the self developed maintainance scripts for the bayes has a business to write anything there

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Axb
On 01/28/2015 03:18 PM, Kevin A. McGrail wrote: On 1/28/2015 9:04 AM, Reindl Harald wrote: my main point is that i don't want the locking IO when nothing then the self developed maintainance scripts for the bayes has a business to write anything there - it should be only read and in the

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Kevin A. McGrail
On 1/28/2015 9:04 AM, Reindl Harald wrote: my main point is that i don't want the locking IO when nothing then the self developed maintainance scripts for the bayes has a business to write anything there - it should be only read and in the best case from each spamc-forker only opened on

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Reindl Harald
cking IO when nothing then the self developed maintainance scripts for the bayes has a business to write anything there - it should be only read and in the best case from each spamc-forker only opened once in his lifetime for best performance [root@testserver:~]$ cat /etc/systemd/system/spamassas

Re: why does SA without autolearn need bayes read-write?

2015-01-28 Thread Martin Gregorie
On Tue, 2015-01-27 at 16:40 -0800, John Hardin wrote: > On Wed, 28 Jan 2015, Reindl Harald wrote: > > > if understand you correctly we agree that there is no reason /var can't be > > mounted read-only? > > Other than the historical practice that /var is intended to contain > varying data, and t

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread John Hardin
On Wed, 28 Jan 2015, Reindl Harald wrote: Setting bayes_auto_expire 0 doesn't imply the database is not going to expired. The recommended way to expire is to turn-off auto-expiry and expire from cron. don't understand that completly * bayes_auto_expire 0 * which cronjob would expire The

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread Reindl Harald
Am 28.01.2015 um 00:55 schrieb RW: On Tue, 27 Jan 2015 18:49:23 +0100 Reindl Harald wrote: Am 27.01.2015 um 17:28 schrieb Matus UHLAR - fantomas: nobody expires or updates anything in a hand-maintained bayes the one you might use, but not without timestamps the intention of this

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread RW
On Tue, 27 Jan 2015 18:49:23 +0100 Reindl Harald wrote: > > > Am 27.01.2015 um 17:28 schrieb Matus UHLAR - fantomas: > >> nobody expires or updates anything in a hand-maintained bayes > > > > the one you might use, but not without timestamps > > the inte

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread Reindl Harald
Am 27.01.2015 um 17:28 schrieb Matus UHLAR - fantomas: Am 27.01.2015 um 13:44 schrieb Matus UHLAR - fantomas: On 27.01.15 03:01, Reindl Harald wrote: with "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be happy with "ReadOnlyD

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread Matus UHLAR - fantomas
Am 27.01.2015 um 13:44 schrieb Matus UHLAR - fantomas: On 27.01.15 03:01, Reindl Harald wrote: with "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be happy with "ReadOnlyDirectories=/var/lib" the bayes databaase contains

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread Reindl Harald
Am 27.01.2015 um 14:33 schrieb Axb: On 01/27/2015 02:23 PM, Reindl Harald wrote: Am 27.01.2015 um 13:44 schrieb Matus UHLAR - fantomas: On 27.01.15 03:01, Reindl Harald wrote: with "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread jpff
On Tue, 27 Jan 2015, Reindl Harald wrote: nobody expires or updates anything in a hand-maintained bayes Just amessage from nobody (important) apparently ==John ff

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread Axb
On 01/27/2015 02:23 PM, Reindl Harald wrote: Am 27.01.2015 um 13:44 schrieb Matus UHLAR - fantomas: On 27.01.15 03:01, Reindl Harald wrote: with "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be happy with "ReadOnlyDirectories=

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread Reindl Harald
Am 27.01.2015 um 13:44 schrieb Matus UHLAR - fantomas: On 27.01.15 03:01, Reindl Harald wrote: with "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be happy with "ReadOnlyDirectories=/var/lib" the bayes databaase contains

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread Benny Pedersen
Matus UHLAR - fantomas skrev den 2015-01-27 13:44: On 27.01.15 03:01, Reindl Harald wrote: with "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be happy with "ReadOnlyDirectories=/var/lib" the bayes databaase contains not o

Re: why does SA without autolearn need bayes read-write?

2015-01-27 Thread Matus UHLAR - fantomas
On 27.01.15 03:01, Reindl Harald wrote: with "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be happy with "ReadOnlyDirectories=/var/lib" the bayes databaase contains not only tokens, but also timestamps used for expiration.

why does SA without autolearn need bayes read-write?

2015-01-26 Thread Reindl Harald
IMHO that is a bug with "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be happy with "ReadOnlyDirectories=/var/lib" training and sa-update is done on a shell independent of network aware services Jan 27 02:52:58 testserve

Re: spamassassin bayes rules

2015-01-06 Thread Mark Martinec
Filip Havlíček wrote: Anybody can help with this? I still cannot find some helpful information, thanks. Dne 10.12.2014 v 14:52 Christian Grunfeld napsal(a): when you run bayes in SQL and does sa-learn --username it will not try to setuid to that user (in a real system user scenario it will

Re: spamassassin bayes rules

2015-01-05 Thread Filip Havlíček
Anybody can help with this? I still cannot find some helpful information, thanks. Dne 10.12.2014 v 14:52 Christian Grunfeld napsal(a): when you run bayes in SQL and does sa-learn --username it will not try to setuid to that user (in a real system user scenario it will fail for non existent

Re: spamassassin bayes rules

2014-12-10 Thread Christian Grunfeld
when you run bayes in SQL and does sa-learn --username it will not try to setuid to that user (in a real system user scenario it will fail for non existent users). Instead it uses that username to save and recall data from database. Due to forged addresses your system treat any originating address

spamassassin bayes rules

2014-12-10 Thread Filip Havlíček
Hi, I have configured spamasssin with bayes user rules with this configuration: http://pastebin.com/KWW78DJx I would like to ask you, if everything is correct, because I found in table bayes_vars lot of (thousands) unknown email addresses like: a...@hotmail.com ablewi...@hotmail.com abl

Re: Bayes learning differences: v3.3.2 to v3.4.0

2014-11-05 Thread Kevin A. McGrail
at way, admins could tune tweak this behavior to allow more/less auto-learning... (i.e. 1 body points, and 2.5 head points) Thoughts? Agreed. Can you work on a patch to provide this? As for Bayes strategies (and without starting a flamewar), we just started implementing an IMAP folder in

Re: Bayes learning differences: v3.3.2 to v3.4.0

2014-11-05 Thread John Hardin
On Wed, 5 Nov 2014, John Woods wrote: As for Bayes strategies (and without starting a flamewar), we just started implementing an IMAP folder in everyone's mailbox called "Learn As Spam", that gets processed through "sa-learn --spam". It sounds like we may need

Re: Bayes learning differences: v3.3.2 to v3.4.0

2014-11-05 Thread John Woods
s to allow admins to be able to affect the $required_body_points and $required_head_points in AutoLearnThreshold.pm. That way, admins could tune tweak this behavior to allow more/less auto-learning... (i.e. 1 body points, and 2.5 head points) Thoughts? As for Bayes strategies (and without

Re: Bayes learning differences: v3.3.2 to v3.4.0

2014-11-05 Thread RW
ur score sets, chosen according to whether Bayes and network tests are off or on. Auto-training uses the scoreset that you would have with Bayes turned-off. Also rules marked noautolearn, learn and userconf are ignored.

Re: Bayes learning differences: v3.3.2 to v3.4.0

2014-11-05 Thread Kevin A. McGrail
configuration, to increase the number of spam e-mails being auto-learned? 3) Instead, do we need to completely change our strategy for how we're using Bayes? I will leave Bayes comments to other experts but in general, I believe you will find that some sort of NON automated learning will p

Bayes learning differences: v3.3.2 to v3.4.0

2014-11-04 Thread John Woods
ndividual tests. 2) How can we affect the configuration, to increase the number of spam e-mails being auto-learned? 3) Instead, do we need to completely change our strategy for how we're using Bayes? Thanks, John**

Re: General rules for training bayes

2014-10-23 Thread Matus UHLAR - fantomas
but do you train mail from mass-mailers? Staples? Facebook? Banks? why not? of course I train if I want such mail to be properly classified later. On 22.10.14 14:36, Alex Regan wrote: The problem I've had with doing this is that it's often so difficult to determine which bulk message shoul

Re: General rules for training bayes

2014-10-22 Thread Alex Regan
Hi, I'm having some trouble with my bayes database, and thought it would be a good time to just rebuild it. I'm wondering if anyone has any good suggestions for the type of mail that should be used for training. be careful about forwarded mail, if possible. if you get many spam fro

Re: General rules for training bayes

2014-10-22 Thread RW
On Wed, 22 Oct 2014 14:44:24 +0200 Reindl Harald wrote: > > Am 22.10.2014 um 14:30 schrieb Benny Pedersen: > > On October 22, 2014 1:30:44 PM Matus UHLAR - fantomas > > wrote: > > > >> oh, does BAYES take care about these? > >> we are still talki

Re: General rules for training bayes

2014-10-22 Thread Benny Pedersen
On October 22, 2014 3:05:56 PM Matus UHLAR - fantomas wrote: >>On October 22, 2014 1:30:44 PM Matus UHLAR - fantomas >> wrote: >>>oh, does BAYES take care about these? >>>we are still talking about manually feeding BAYES, aren't we? >Am 22.10.2014 um

Re: General rules for training bayes

2014-10-22 Thread Matus UHLAR - fantomas
On October 22, 2014 1:30:44 PM Matus UHLAR - fantomas wrote: oh, does BAYES take care about these? we are still talking about manually feeding BAYES, aren't we? Am 22.10.2014 um 14:30 schrieb Benny Pedersen: Sorry, yes bayes can be ignore all headers if one dont like it to track o

Re: General rules for training bayes

2014-10-22 Thread Reindl Harald
Am 22.10.2014 um 14:30 schrieb Benny Pedersen: On October 22, 2014 1:30:44 PM Matus UHLAR - fantomas wrote: oh, does BAYES take care about these? we are still talking about manually feeding BAYES, aren't we? Sorry, yes bayes can be ignore all headers if one dont like it to track o

Re: General rules for training bayes

2014-10-22 Thread Benny Pedersen
On October 22, 2014 1:30:44 PM Matus UHLAR - fantomas wrote: oh, does BAYES take care about these? we are still talking about manually feeding BAYES, aren't we? Sorry, yes bayes can be ignore all headers if one dont like it to track origin senders or ips

Re: General rules for training bayes

2014-10-22 Thread RW
en wrote: > >This only correct if internal networks and or trusted networks is > >not configured correct > > oh, does BAYES take care about these? To a limited extent. It effects the contents of some metadata, but I don't think affect which headers are tokenized.

Re: General rules for training bayes

2014-10-22 Thread Matus UHLAR - fantomas
be careful about forwarded mail, if possible. if you get many spam from your old account, it may start to classify ALL mail forwarded through that On 22.10.14 13:15, Benny Pedersen wrote: This only correct if internal networks and or trusted networks is not configured correct oh, does BAYES

Re: General rules for training bayes

2014-10-22 Thread Reindl Harald
or trusted networks is not configured correct what has a forwarding from @gmx.net or so to do with trusted_networks? the topic was about train the bayes on the Received headers and no single word about internal hops signature.asc Description: OpenPGP digital signature

Re: General rules for training bayes

2014-10-22 Thread Benny Pedersen
On October 22, 2014 1:08:45 PM Matus UHLAR - fantomas wrote: be careful about forwarded mail, if possible. if you get many spam from your old account, it may start to classify ALL mail forwarded through that This only correct if internal networks and or trusted networks is not configured co

Re: General rules for training bayes

2014-10-22 Thread Matus UHLAR - fantomas
On 21.10.14 21:29, Alex Regan wrote: I'm having some trouble with my bayes database, and thought it would be a good time to just rebuild it. I'm wondering if anyone has any good suggestions for the type of mail that should be used for training. be careful about forwarded mail, i

Re: General rules for training bayes

2014-10-22 Thread Axb
On 10/22/2014 03:29 AM, Alex Regan wrote: I have the database in a replicated mysql database for now. I'd like to go to redis, but it's not quite ready for distributed configurations, correct? What do you mean by "distributed configurations"? - many clients querying a central Redis DB? - real

General rules for training bayes

2014-10-21 Thread Alex Regan
Hi all, I'm having some trouble with my bayes database, and thought it would be a good time to just rebuild it. I'm wondering if anyone has any good suggestions for the type of mail that should be used for training. I understand individually-crafted emails would make the best h

Re: distribute bayes with rsync

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 18:03 schrieb RW: On Fri, 17 Oct 2014 20:04:11 +0200 Reindl Harald wrote: a perfect trained bayes on the inbound spamfirewall * after recently a account was hacked and sent spam (luckily not massive by rate-limits) which would have been clearly caught by SA

Re: distribute bayes with rsync

2014-10-20 Thread RW
On Fri, 17 Oct 2014 20:04:11 +0200 Reindl Harald wrote: > a perfect trained bayes on the inbound spamfirewall > >> * after recently a account was hacked and sent spam > >> (luckily not massive by rate-limits) which would have > >> been clearly caught b

Re: distribute bayes with rsync

2014-10-17 Thread Reindl Harald
Am 17.10.2014 um 19:45 schrieb RW: On Fri, 17 Oct 2014 11:59:30 +0200 Reindl Harald wrote: does SA need anything to recognize a rsynced bayes on similar setups to load the new version or is it anyways reopened for each connection by spamd child? I think so, and I don't recall any sp

Re: distribute bayes with rsync

2014-10-17 Thread RW
On Fri, 17 Oct 2014 11:59:30 +0200 Reindl Harald wrote: > Hi > > does SA need anything to recognize a rsynced bayes on similar setups > to load the new version or is it anyways reopened for each connection > by spamd child? I think so, and I don't recall any special handling

Re: distribute bayes with rsync

2014-10-17 Thread Reindl Harald
Am 17.10.2014 um 12:02 schrieb Joolee: File base bayes is actually quite slow. Isn't it an option for you to use an sql replicated master-slave set or cluster or per haps Redis master-slave replication? performance is not a problem here, no high traffic on the submission servers and o

Re: distribute bayes with rsync

2014-10-17 Thread Axb
On 10/17/2014 12:02 PM, Joolee wrote: It would be nice if we'd be able to use a clustered nosql database though. nosql like what? something like Cassandra? CouchDB? for Bayes they're slower than file DB.(tested, dumped) If your traffic size justifies it, till Redis cluster i

Re: distribute bayes with rsync

2014-10-17 Thread Joolee
File base bayes is actually quite slow. Isn't it an option for you to use an sql replicated master-slave set or cluster or per haps Redis master-slave replication? It would be nice if we'd be able to use a clustered nosql database though. Kind regards, Peter Overtoom On 17 October

distribute bayes with rsync

2014-10-17 Thread Reindl Harald
Hi does SA need anything to recognize a rsynced bayes on similar setups to load the new version or is it anyways reopened for each connection by spamd child? in case of clamd rsync "/var/lib/clamav/" is enough background: * a perfect trained bayes on the inbound spamfirewa

Re: Philosophical question on Bayes (was Re: 23_bayes_ignore_header.cf)

2014-10-14 Thread Jeff Mincy
From: Axb Date: Tue, 14 Oct 2014 23:37:36 +0200 On 10/14/2014 11:08 PM, Adam Katz wrote: >> On Tue, 14 Oct 2014 16:10:52 +0200 Axb wrote: >>> and to avoid further discussions of what header may pollute bayes or >>> not, I've removed all header e

Re: Philosophical question on Bayes (was Re: 23_bayes_ignore_header.cf)

2014-10-14 Thread Reindl Harald
Am 14.10.2014 um 23:37 schrieb Axb: On 10/14/2014 11:08 PM, Adam Katz wrote: On Tue, 14 Oct 2014 16:10:52 +0200 Axb wrote: and to avoid further discussions of what header may pollute bayes or not, I've removed all header entries which are not directly related to AV/filter products.

Re: Philosophical question on Bayes (was Re: 23_bayes_ignore_header.cf)

2014-10-14 Thread Axb
On 10/14/2014 11:08 PM, Adam Katz wrote: On Tue, 14 Oct 2014 16:10:52 +0200 Axb wrote: and to avoid further discussions of what header may pollute bayes or not, I've removed all header entries which are not directly related to AV/filter products. On 10/14/2014 07:17 AM, David F. Skoll

Re: Philosophical question on Bayes (was Re: 23_bayes_ignore_header.cf)

2014-10-14 Thread Adam Katz
> On Tue, 14 Oct 2014 16:10:52 +0200 Axb wrote: >> and to avoid further discussions of what header may pollute bayes or >> not, I've removed all header entries which are not directly related >> to AV/filter products. On 10/14/2014 07:17 AM, David F. Skoll wrote: > I&

Re: Philosophical question on Bayes (was Re: 23_bayes_ignore_header.cf)

2014-10-14 Thread Axb
On 10/14/2014 04:17 PM, David F. Skoll wrote: On Tue, 14 Oct 2014 16:10:52 +0200 Axb wrote: and to avoid further discussions of what header may pollute bayes or not, I've removed all header entries which are not directly related to AV/filter products. I'm not sure I agree with

Philosophical question on Bayes (was Re: 23_bayes_ignore_header.cf)

2014-10-14 Thread David F. Skoll
On Tue, 14 Oct 2014 16:10:52 +0200 Axb wrote: > and to avoid further discussions of what header may pollute bayes or > not, I've removed all header entries which are not directly related > to AV/filter products. I'm not sure I agree with being too clever about Bayes. Surely

Re: Site-wide bayes and individual bayes

2014-10-12 Thread Ted Mittelstaedt
ryone else would benefit from this user’s actions or, alternatively, that the user’s aggressive tagging will actually ‘poison’ the bayes db for the other users who maybe do not think that endless emails from pinterest or some political candidate are actually spam. For starters your problem isn&#

Re: Site-wide bayes and individual bayes

2014-10-12 Thread Reindl Harald
that everyone else would benefit from this user’s actions or, alternatively, that the user’s aggressive tagging will actually ‘poison’ the bayes db for the other users who maybe do not think that endless emails from pinterest or some political candidate are actually spam. if nobody trains his

Re: Site-wide bayes and individual bayes

2014-10-12 Thread LuKreme
benefit from this user’s actions or, alternatively, that the user’s aggressive tagging will actually ‘poison’ the bayes db for the other users who maybe do not think that endless emails from pinterest or some political candidate are actually spam. -- "You see, in this world there's two

Re: Site-wide bayes and individual bayes

2014-10-10 Thread John Hardin
On Fri, 10 Oct 2014, RW wrote: On Wed, 8 Oct 2014 15:26:25 -0600 LuKreme wrote: Is it possible to have a site-wide bayes AND individual bayes for some users (or all users)? Not as things stand. Not as things stand, possibly absent a hack like: any user who wants to use the site-wide

Re: Site-wide bayes and individual bayes

2014-10-10 Thread RW
On Wed, 8 Oct 2014 15:26:25 -0600 LuKreme wrote: > Is it possible to have a site-wide bayes AND individual bayes for > some users (or all users)? Not as things stand. You could use Bayes for one and a separate filter for the other. > And, if not, is it generally better to do sitewi

Re: Training Bayes On A Gateway

2014-10-09 Thread Ted Mittelstaedt
A, Sec+ wrote: I’ve built a gateway server using sa-exim to filter email for our corporate Microsoft Exchange environment. It’s working pretty good, but I have Bayes turned off due to the fact that I am unsure on how to train it in this type of environment. Has someone written a how to article o

Re: Training Bayes On A Gateway

2014-10-09 Thread Jason W.
On Thu, Oct 9, 2014 at 4:14 PM, John Hardin wrote: > On Thu, 9 Oct 2014, John Traweek CCNA, Sec+ wrote: > > I've built a gateway server using sa-exim to filter email for our >> > > This topic comes up fairly regularly. Did you search the list archives on &g

Re: Training Bayes On A Gateway

2014-10-09 Thread John Hardin
On Thu, 9 Oct 2014, John Traweek CCNA, Sec+ wrote: I've built a gateway server using sa-exim to filter email for our corporate Microsoft Exchange environment. It's working pretty good, but I have Bayes turned off due to the fact that I am unsure on how to train it in this type of e

Re: Training Bayes On A Gateway

2014-10-09 Thread Reindl Harald
Am 09.10.2014 um 21:43 schrieb John Traweek CCNA, Sec+: I’ve built a gateway server using sa-exim to filter email for our corporate Microsoft Exchange environment. It’s working pretty good, but I have Bayes turned off due to the fact that I am unsure on how to train it in this type of

Training Bayes On A Gateway

2014-10-09 Thread John Traweek CCNA, Sec+
I've built a gateway server using sa-exim to filter email for our corporate Microsoft Exchange environment. It's working pretty good, but I have Bayes turned off due to the fact that I am unsure on how to train it in this type of environment. Has someone written a how to article

<    5   6   7   8   9   10   11   12   13   14   >