On Thu, 2003-11-06 at 11:49, Evan Platt wrote:
> --On Wednesday, November 05, 2003 10:29 PM -0500 Bill Baker
> <[EMAIL PROTECTED]> wrote:
> 
> > I received 3 identical spams from the same e-mail address that did not
> > get classified as spam.  I tried to do a sa-learn --spam on the message,
> > and it said it learned from 1 message, but when I tried to filter the
> > message again, the Bayesian filter says that the spam probability is 0
> > to 1%.  I even tried to add the sender's address to the blacklist, but
> > it only worked on the first message, even though all three messages were
> > sent from the same address.  I have used sa-learn on other messages and
> > it always seems to work.  But this time it didn't.  Can anyone tell me
> > what I can do to get Spamassassin to recognize it as spam?
> 
> 
> I may be wrong as I'm not the primary admin for our SA installation,
> however the way I understood it is that learning a message as spam won't
> automatically mark similar future messages as spam - a number of ham and
> spam messages must be learned for the training to be effective. 

I realize that, but shouldn't doing an sa-learn --spam on the message
change the score for the exact same message?  What I'm doing is saving
one of the messages to a file (I'll call the file name "thisisspam") and
then doing the following:

sa-learn --spam thisisspam
spamc -c <thisisspam

The second command never comes back any higher than -1.5.  And if I run:

spamc <thisisspam

The score shows up as -3.3.

> As to then blacklisting the address... Perhaps the Sender, From or Reply-To
> field is different on the three messages?

No, the From: address was exactly the same each time ([EMAIL PROTECTED]), and
there was no Reply-To.

One thing I noticed was that the phrase "Fake passports" showed up in
the spam.  Maybe this phrase can be incorporated into the spam rules?



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to