I have attached the 3 files I use on my FreeBSD box. GetHam.txt and GetSpam.txt are the bash scripts. Pretty straight forward. I also attached a copy of my fetchmailrc file so you can get the email from the Notes server via POP3. I am sure a bash scripting guru could get this into one file, but I dont mind 3 files.
I created a user on my FreeBSD box called spamd. This is the user that MIMEDefang is running as.
We created two users on our Notes server called Spam Collector and Ham Collector.
We enabled POP3 access to the Notes server so we could download the messages via fetchmail.
***
To create the "Report Spam" Action do following:
In your Notes client, click Create at the top and select Agent
Give it a name. We called ours "Report Spam" and "Report Non-Spam". Our users would have no idea what HAM is.
Make sure it is set up as a Simple Action agent.
Add an action to copy documents to a database and select the database you want to copy the documents to.
Add an action to delete the documents from the database.
This will copy the message to the SpamCollector database and then delete them from the users database.
For the "Report Non-Spam" Action, do the same steps, just leave off the delete part. This will allow them to keep the message in the mailbox. After all they really did want it.
***
Our Notes guy is out of the office right now, but I will see if I can get some instructions from him on how to add the actions to the server template that you may be using. I didnt do that part. I had it set up as a private agent in my client for a few months before we finally rolled it out to the rest of the company through the general template everyone is using.
I manually go through the spam and ham collector mailboxes in my Notes client to remove any emails that should not be in there. We have a few users that use the "Report Spam" action as a delete function so we get all kinds of company email in there too.
I then run the bash script while being logged in via ssh as the spamd user on my FreeBSD box. I did notice that you have to actually be logged in as the spamd user (or whatever you have SA/MIMEDefang running as) and not su'd to the spamd user. If you are su'd it learns the spam in your logged in users bayes databases. There is probably a way around this, but I just log in as spamd to avoid any problems.
I could, and did for a while, set these bash scripts up to run through cron, but since our users tend to fill the mailboxes with crap I chose to run it manually so I can keep the bayes cleaner.
I will try to get something webanized this weekend. I didnt think there was much of a need so I never bothered.
If something doesnt make sense, or I am way off, or something can be simplified, let me know.
--Mike
Jeffrey Lee wrote:
Sometimes, when we upgrade here, our agents fail to work on the never versions... I guess some of them are very complex but I just like to check. Could you send me that code as well?
I have a RH box but it is being replaced by FDSD soon but I should be able to take what you have and alter it to work with RH
Thanks, Jeffrey Lee reflex8.com
On Jan 20, 2005, at 10:28 AM, Mike Carlson wrote:
We dont use OS X here so I am not sure.
Its just an agent so it will work in almost any version of Notes. We used it on 5.x for a long time before we recently upgraded to 6.
Its just a simple agent that moves the selected messages to a specific database.
--Mike
Jeffrey Lee wrote:
Would you happen to know if there is a domino 6.0 app for OS X? Also is your code exclusive to Notes 6.0 + or will it work on 5.0.9? On Jan 20, 2005, at 10:05 AM, Mike Carlson wrote:
We created 2 mailboxes on our Notes server called SpamCollector and HamCollector.
We then set up an Agent in the template that added an action to move selected untagged spam to the Spam Collector mailbox and copy the selected HAM messages to the Ham collector mailbox.
I created a bash script on my FreeBSD box that is running SA to log into the different accounts via POP3 to the spamd account on the SA box and then runs the learn process.
It works pretty slick.
You have to setup an agent to move or copy the messages to the databases instead of forwarding them otherwise you lose the headers.
I can provide some code if you want. We are on Notes 6.5 and Domino 6.0.
--Mike
[EMAIL PROTECTED] wrote:
Help... I need to feed spam and ham to sa-learn. We are using lotus notes
R5 and I need to get the messages into a format that sa-learn can use. The
closest I have found is to export messages as "structured text", and this
exports multiple messages as one file, the example below is how they are
exported... Is this usable by sa-learn? Any suggestions? Thanks for the
advice.
******************************************************************** ** ******************************************************************** ** ****************************************
Received: from p2kwshp1 ([10.67.3.129]) by
psplotp1.transplace.com (Lotus Domino Release 5.0.11) with SMTP id
2005012009223223:23490 ; Thu, 20 Jan 2005 09:22:32 -0600
Received: From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345); id 110623455278; Thu, 20 Jan 2005
09:22:32 -0600
Received: by smtp.transplace.com (Postfix, from userid 1035) id
01B1A11447; Thu, 20 Jan 2005 09:22:31 -0600 (CST)
Received: from mail.apache.org (hermes.apache.org [209.237.227.199]) by
smtp.transplace.com (Postfix) with SMTP id D786E1146A for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:22:30 -0600 (CST)
Received: (qmail 19329 invoked by uid 500); 20 Jan 2005 15:22:09 -0000
Mailing_List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
list_help: <mailto:[EMAIL PROTECTED]>
list_unsubscribe: <mailto:[EMAIL PROTECTED]>
list_post: <mailto:users@spamassassin.apache.org>
List_Id: <users.spamassassin.apache.org>
Delivered_To: mailing list users@spamassassin.apache.org
Received: (qmail 19226 invoked by uid 99); 20 Jan 2005 15:22:08 -0000
X_ASF_Spam_Status: No, hits=0.0 required=10.0
tests=HTML_60_70,HTML_MESSAGE
X_Spam_Check_By: apache.org
Received_SPF: pass (hermes.apache.org: local policy)
Received: from mail.lastar.com (HELO server11.lastar.com) (65.89.139.10)
by apache.org (qpsmtpd/0.28) with SMTP; Thu, 20 Jan 2005 07:22:06 -0800
Received: from spamfilter.lastar.com ([192.168.70.12]) by
server11.lastar.com (SMSSMTP 4.0.0.59) with SMTP id M2005012010220301455
for <users@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500
Received: from localhost (localhost [127.0.0.1]) by
spamfilter.lastar.com (Postfix) with ESMTP id 9845CEFCE4 for
<users@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
Received: from spamfilter.lastar.com ([127.0.0.1]) by localhost
(spamfilter [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31569-10
for <users@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
Received: from server24.ctg.com (server24.ctg.com [192.168.74.10]) by
spamfilter.lastar.com (Postfix) with ESMTP id 58550EFCE0 for
<users@spamassassin.apache.org>; Thu, 20 Jan 2005 10:22:03 -0500 (EST)
X_MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
MIME_Version: 1.0
Subject: Testing a message
PostedDate: 01/20/2005 09:22:02 AM
$MessageID: <[EMAIL PROTECTED]>
X_MS_Has_Attach:
X_MS_TNEF_Correlator:
Thread_Topic: Testing a message
Thread_Index: AcT/A8r1xq4Lq9KHR4yEJ+GLien6cQ==
From: "Jason Gauthier" <[EMAIL PROTECTED]>
SendTo: "SPAMASSASSIN" <users@spamassassin.apache.org>
X_Virus_Scanned: amavisd-new at lastar.com
X_Virus_Checked: Checked
X_Spam_Checker_Version: SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status: No, hits=-4.8 required=4.0 tests=AWL,BAYES_00,HTML_MESSAGE
autolearn=ham version=2.63
X_Spam_Level:
$MIMETrack: Itemize by SMTP Server on psplotp1/com(Release 5.0.11 |July
24, 2002) at 01/20/2005 09:22:32 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:21 AM
SMTPOriginator:
users-return-22431- [EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers: CN=psplotp1/O=com
RouteTimes: 01/20/2005 09:22:32 AM-01/20/2005 09:22:32 AM
$MsgTrackFlags: 0
DeliveredDate: 01/20/2005 09:22:32 AM
Greetings!
I'm using SA 3.0.2 with postfix and amavisd. (so no spamd is running)
A message came in that was not spam that got blocked. I took it to
sa-learn and learned it as ham.
I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?
Jason
Received: from p2kwshp1 ([10.67.3.129]) by
psplotp1.transplace.com (Lotus Domino Release 5.0.11) with SMTP id
2005012009323090:24101 ; Thu, 20 Jan 2005 09:32:30 -0600
Received: From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345); id 1106235150878; Thu, 20 Jan
2005 09:32:30 -0600
Received: by smtp.transplace.com (Postfix, from userid 1035) id
AE2DD11480; Thu, 20 Jan 2005 09:32:30 -0600 (CST)
Received: from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
[134.130.3.130]) by smtp.transplace.com (Postfix) with ESMTP id A0F3E11447
for <[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:32:28 -0600 (CST)
Received: from r220-1 (r220-1.rz.RWTH-Aachen.DE [134.130.3.31]) by
ms-dienst.rz.rwth-aachen.de (iPlanet Messaging Server 5.2 HotFix 1.12
(built Feb 13 2003)) with ESMTP id
<[EMAIL PROTECTED]> for
[EMAIL PROTECTED]; Thu, 20 Jan 2005 16:28:26 +0100 (MET)
Received: from relay.rwth-aachen.de ([134.130.3.1]) by r220-1
(MailMonitor for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:26:51 +0100 (MET)
Received: from hermes.rz.rwth-aachen.de (hermes.rz.RWTH-Aachen.DE
[134.130.4.36]) by relay.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id
j0KFQdUJ001781; Thu, 20 Jan 2005 16:26:39 +0100 (MET)
Received: from [134.130.4.36] (localhost [127.0.0.1]) by
hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with ESMTP id
j0KFHElg012554; Thu, 20 Jan 2005 16:20:48 +0100 (CET)
Received: from ms-dienst.rz.rwth-aachen.de (ms-1.rz.RWTH-Aachen.DE
[134.130.3.130]) by hermes.rz.rwth-aachen.de (8.12.8+Sun/8.12.2-1) with
ESMTP id j0KFHBle012550 for <[EMAIL PROTECTED]>; Thu, 20 Jan
2005 16:17:11 +0100 (CET)
Received: from circe (circe.rz.RWTH-Aachen.DE [134.130.3.36]) by
ms-dienst.rz.rwth-aachen.de (iPlanet Messaging Server 5.2 HotFix 1.12
(built Feb 13 2003)) with ESMTP id
<[EMAIL PROTECTED]> for
[EMAIL PROTECTED] (ORCPT [EMAIL PROTECTED]); Thu,
20 Jan 2005 16:17:10 +0100 (MET)
Received: from relay2.rwth-aachen.de ([134.130.3.6]) by circe (MailMonitor
for SMTP v1.2.2 ) ; Thu, 20 Jan 2005 16:17:09 +0100 (MET)
Received: from smtps-vbr2.xs4all.nl (smtps-vbr2.xs4all.nl [194.109.24.18])
by relay2.rwth-aachen.de (8.13.0/8.13.0/1) with ESMTP id j0KFH7st023252
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 16:17:07 +0100 (MET)
Received: from isop10 (velvet.isolution.nl [194.109.164.102])
(authenticated bits=0) by smtps-vbr2.xs4all.nl (8.12.11/8.12.11) with
ESMTP id j0KFH715004012 for <[EMAIL PROTECTED]>; Thu, 20 Jan
2005 16:17:07 +0100 (CET envelope-from [EMAIL PROTECTED])
PostedDate: 01/20/2005 09:16:57 AM
Principal: "Ruud H.G. van Tol" <[EMAIL PROTECTED]>
Subject: Re: Variable names
From: [EMAIL PROTECTED]
SendTo: "[procmail]" <[EMAIL PROTECTED]>
Errors_To: [EMAIL PROTECTED]
$MessageID: <[EMAIL PROTECTED]>
Organization: Chaos rules.
MIME_Version: 1.0
X_MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
$Mailer: Microsoft Outlook Express 6.00.2800.1437
DeliveryPriority: N
X_MSMail_Priority: Normal
Precedence: list
X_BeenThere: [EMAIL PROTECTED]
X_Virus_Scanned: by XS4ALL Virus Scanner
References: <[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
X_Mailman_Version: 2.1.5
list_post: <mailto:[EMAIL PROTECTED]>
List_Subscribe: <http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
<mailto:[EMAIL PROTECTED]>
list_unsubscribe:
<http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail>,
<mailto:[EMAIL PROTECTED]>
List_Archive: <http://mailman.RWTH-Aachen.de/pipermail/procmail>
list_help: <mailto:[EMAIL PROTECTED]>
List_Id: discussion of the procmail program
<procmail.lists.RWTH-Aachen.DE>
X_Spam_Checker_Version: SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status: No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
version=2.63
X_Spam_Level:
$MIMETrack: Itemize by SMTP Server on psplotp1/com(Release 5.0.11 |July
24, 2002) at 01/20/2005 09:32:30 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:21 AM
SMTPOriginator: [EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers: CN=psplotp1/O=com
RouteTimes: 01/20/2005 09:32:30 AM-01/20/2005 09:32:31 AM
$MsgTrackFlags: 0
DeliveredDate: 01/20/2005 09:32:31 AM
Toen wij NM Public kietelden, kwam er dit uit:
Does anyone know if there are any conventions for naming user-defined procmail variables?
I (try to) follow a namespace-approach. Inside abc.inc I use abc_Varname for variables. At the end of abc.inc I (should) unset all variables that have no business outside abc.inc. I sometimes used double underscore for locals, so abc__Varname, but than an abc_Varname could also exist and that would be a new source of problems. An alternative would be abc_LOC_Varname. Inside .procmailrc, the special 'PM_' prefix could be chosen. And 'H_' for values derived from Headers, 'B_' for body-vars, 'G_' for common globals. Some often used variables should stay as they are, like SPC, TAB, WSP (the one without []), NL, and such.
Or for user-defined variables in the Unix world in general?
Both perl and PHP have namespaces. That helps a lot.
In a new procmail, we could have real namespaces, like
namespace.Varname. And multiple matches, like MATCH1..
MATCHn. And, and, ...
--
Grtz, Ruud
____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
[EMAIL PROTECTED]
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail
Received: from p2kwshp1 ([10.67.3.129]) by
psplotp1.transplace.com (Lotus Domino Release 5.0.11) with SMTP id
2005012009333540:24187 ; Thu, 20 Jan 2005 09:33:35 -0600
Received: From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345); id 1106235214958; Thu, 20 Jan
2005 09:33:34 -0600
Received: by smtp.transplace.com (Postfix, from userid 1035) id
D720B11481; Thu, 20 Jan 2005 09:33:34 -0600 (CST)
Received: from mail.apache.org (hermes.apache.org [209.237.227.199]) by
smtp.transplace.com (Postfix) with SMTP id E49C811485 for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:33:33 -0600 (CST)
Received: (qmail 54834 invoked by uid 500); 20 Jan 2005 15:33:25 -0000
Mailing_List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
list_help: <mailto:[EMAIL PROTECTED]>
list_unsubscribe: <mailto:[EMAIL PROTECTED]>
list_post: <mailto:users@spamassassin.apache.org>
List_Id: <users.spamassassin.apache.org>
Delivered_To: mailing list users@spamassassin.apache.org
Received: (qmail 54818 invoked by uid 99); 20 Jan 2005 15:33:25 -0000
X_ASF_Spam_Status: No, hits=1.8 required=10.0
tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
X_Spam_Check_By: apache.org
Received_SPF: pass (hermes.apache.org: local policy)
Received: from rwcrmhc11.comcast.net (HELO rwcrmhc11.comcast.net)
(204.127.198.35) by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:33:23 -0800
Received: from mk.comcast.net
(pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84]) by
comcast.net (rwcrmhc11) with SMTP id <200501201533200130090j09e>;
Thu, 20 Jan 2005 15:33:21 +0000
$MessageID: <[EMAIL PROTECTED]>
$Mailer: QUALCOMM Windows Eudora Version 6.2.0.14
PostedDate: 01/20/2005 09:33:22 AM
SendTo: "Jason Gauthier" <[EMAIL PROTECTED]>,"SPAMASSASSIN"
<users@spamassassin.apache.org>
From: Matt Kettler <[EMAIL PROTECTED]>
Subject: Re: Testing a message
In_Reply_To: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
MIME_Version: 1.0
X_Virus_Checked: Checked
X_Spam_Checker_Version: SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status: No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
version=2.63
X_Spam_Level:
$MIMETrack: Itemize by SMTP Server on psplotp1/com(Release 5.0.11 |July
24, 2002) at 01/20/2005 09:33:35 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:21
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
users-return-22432- [EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers: CN=psplotp1/O=com
RouteTimes: 01/20/2005 09:33:35 AM-01/20/2005 09:33:35 AM
$MsgTrackFlags: 0
DeliveredDate: 01/20/2005 09:33:35 AM
At 10:22 AM 1/20/2005, Jason Gauthier wrote:
I'm using SA 3.0.2 with postfix and amavisd. (so no spamd is running)
A message came in that was not spam that got blocked. I took it to
sa-learn and learned it as ham.
I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?
pipe it through the spamassassin command line:
spamassassin <message.txt
Optionaly you can add the -t parameter to force SA to generate a spam
report, even if it's below the threshold (helpful to see all the rules).
Note: Make sure that sa-learn and spamassassin are being run as the same
user than amavis will access spamassassin as. Otherwise you might be using
a different bayes database (They default to being in $HOME)
Received: from p2kwshp1 ([10.67.3.129]) by
psplotp1.transplace.com (Lotus Domino Release 5.0.11) with SMTP id
2005012009345142:24260 ; Thu, 20 Jan 2005 09:34:51 -0600
Received: From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345); id 1106235291367; Thu, 20 Jan
2005 09:34:51 -0600
Received: by smtp.transplace.com (Postfix, from userid 1035) id
44B3711481; Thu, 20 Jan 2005 09:34:51 -0600 (CST)
Received: from mail.apache.org (hermes.apache.org [209.237.227.199]) by
smtp.transplace.com (Postfix) with SMTP id 3C2DE11457 for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:34:50 -0600 (CST)
Received: (qmail 58916 invoked by uid 500); 20 Jan 2005 15:34:40 -0000
Mailing_List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
list_help: <mailto:[EMAIL PROTECTED]>
list_unsubscribe: <mailto:[EMAIL PROTECTED]>
list_post: <mailto:users@spamassassin.apache.org>
List_Id: <users.spamassassin.apache.org>
Delivered_To: mailing list users@spamassassin.apache.org
Received: (qmail 58903 invoked by uid 99); 20 Jan 2005 15:34:40 -0000
X_ASF_Spam_Status: No, hits=0.1 required=10.0 tests=FORGED_RCVD_HELO
X_Spam_Check_By: apache.org
Received_SPF: pass (hermes.apache.org: local policy)
Received: from smtp-vbr2.xs4all.nl (HELO smtp-vbr2.xs4all.nl)
(194.109.24.22) by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:34:38 -0800
Received: from webmail.xs4all.nl (webmail7.xs4all.nl [194.109.22.167]) by
smtp-vbr2.xs4all.nl (8.12.11/8.12.11) with ESMTP id j0KFYXd5063471;
Thu, 20 Jan 2005 16:34:34 +0100 (CET) (envelope-from
[EMAIL PROTECTED])
Received: from 80.127.176.177 by webmail.xs4all.nl with HTTP;
Thu, 20 Jan 2005 16:34:34 +0100 (CET)
$MessageID: <[EMAIL PROTECTED]>
In_Reply_To: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
PostedDate: 01/20/2005 09:34:34 AM
Subject: Re: Testing a message
From: "Menno van Bennekom" <[EMAIL PROTECTED]>
SendTo: "Jason Gauthier" <[EMAIL PROTECTED]>
CopyTo: "SPAMASSASSIN" <users@spamassassin.apache.org>
ReplyTo: [EMAIL PROTECTED]
User_Agent: SquirrelMail/1.4.3a
$Mailer: SquirrelMail/1.4.3a
MIME_Version: 1.0
X_Virus_Scanned: by XS4ALL Virus Scanner
X_Virus_Checked: Checked
X_Spam_Checker_Version: SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status: No, hits=-4.6 required=4.0 tests=AWL,BAYES_00 autolearn=ham
version=2.63
X_Spam_Level:
$MIMETrack: Itemize by SMTP Server on psplotp1/com(Release 5.0.11 |July
24, 2002) at 01/20/2005 09:34:51 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
users-return-22433- [EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers: CN=psplotp1/O=com
RouteTimes: 01/20/2005 09:34:51 AM-01/20/2005 09:34:51 AM
$MsgTrackFlags: 0
DeliveredDate: 01/20/2005 09:34:51 AM
Greetings!
I'm using SA 3.0.2 with postfix and amavisd. (so no spamd is running)
A message came in that was not spam that got blocked. I took it to
sa-learn and learned it as ham.
I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?
Jason
You probably did something like 'cat message | sa-learn --ham' to learn it
as ham. Like that you can do 'cat message | sendmail [EMAIL PROTECTED]' to
send it again. Or you can do 'cat message | spamassassin -D' to just
evaluate what spamassassin would have done with the message.
Menno van Bennekom
Received: from p2kwshp1 ([10.67.3.129]) by
psplotp1.transplace.com (Lotus Domino Release 5.0.11) with SMTP id
2005012009351447:24295 ; Thu, 20 Jan 2005 09:35:14 -0600
Received: From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345); id 1106235314196; Thu, 20 Jan
2005 09:35:14 -0600
Received: by smtp.transplace.com (Postfix, from userid 1035) id
121DD11460; Thu, 20 Jan 2005 09:35:14 -0600 (CST)
Received: from mail.apache.org (hermes.apache.org [209.237.227.199]) by
smtp.transplace.com (Postfix) with SMTP id D7E7011440 for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:35:12 -0600 (CST)
Received: (qmail 59655 invoked by uid 500); 20 Jan 2005 15:34:45 -0000
Mailing_List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
list_help: <mailto:[EMAIL PROTECTED]>
list_unsubscribe: <mailto:[EMAIL PROTECTED]>
list_post: <mailto:users@spamassassin.apache.org>
List_Id: <users.spamassassin.apache.org>
Delivered_To: mailing list users@spamassassin.apache.org
Received: (qmail 59591 invoked by uid 500); 20 Jan 2005 15:34:44 -0000
Delivered_To: [EMAIL PROTECTED]
Received: (qmail 59459 invoked by uid 99); 20 Jan 2005 15:34:43 -0000
X_ASF_Spam_Status: No, hits=1.8 required=10.0
tests=DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST
X_Spam_Check_By: apache.org
Received_SPF: pass (hermes.apache.org: local policy)
Received: from rwcrmhc13.comcast.net (HELO rwcrmhc13.comcast.net)
(204.127.198.39) by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:34:43 -0800
Received: from mk.comcast.net
(pcp0010744015pcs.howard01.md.comcast.net[69.243.87.84]) by
comcast.net (rwcrmhc13) with SMTP id <2005012015343501500d5spde>;
Thu, 20 Jan 2005 15:34:41 +0000
$MessageID: <[EMAIL PROTECTED]>
$Mailer: QUALCOMM Windows Eudora Version 6.2.0.14
PostedDate: 01/20/2005 09:34:38 AM
SendTo: "Thomas Kinghorn [MTNNS -Rosebank]"
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>
From: Matt Kettler <[EMAIL PROTECTED]>
Subject: Re: Spamassassin 3.0.2 child processes
In_Reply_To: <[EMAIL PROTECTED]
t>
References: <[EMAIL PROTECTED]>
MIME_Version: 1.0
X_Virus_Checked: Checked
X_Spam_Checker_Version: SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status: No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
version=2.63
X_Spam_Level:
$MIMETrack: Itemize by SMTP Server on psplotp1/com(Release 5.0.11 |July
24, 2002) at 01/20/2005 09:35:14 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
users-return-22434- [EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers: CN=psplotp1/O=com
RouteTimes: 01/20/2005 09:35:14 AM-01/20/2005 09:35:14 AM
$MsgTrackFlags: 0
DeliveredDate: 01/20/2005 09:35:14 AM
At 06:58 AM 1/20/2005, Thomas Kinghorn [MTNNS -Rosebank] wrote:
Is there a way to limit spamd child processes?
# ps -ef | grep spam
root 602 1 0 13:28 ? 00:00:12 /usr/bin/spamd -d -c -m5
-H
xadmin 649 602 0 13:29 ? 00:00:09 spamd child xadmin 650 602 0 13:29 ? 00:00:07 spamd child xadmin 651 602 0 13:29 ? 00:00:13 spamd child root 652 602 0 13:29 ? 00:00:10 spamd child root 653 602 0 13:29 ? 00:00:08 spamd child
Yes, with the -m parameter you are already using. You've got -m5, spamd
has 5 children.. set it to -m2 and you'll get 2.
Received: from p2kwshp1 ([10.67.3.129]) by
psplotp1.transplace.com (Lotus Domino Release 5.0.11) with SMTP id
2005012009354443:24330 ; Thu, 20 Jan 2005 09:35:44 -0600
Received: From smtp.transplace.com ([10.67.100.156]) by p2kwshp1
(WebShield SMTP v4.5 MR1a P0803.345); id 1106235344541; Thu, 20 Jan
2005 09:35:44 -0600
Received: by smtp.transplace.com (Postfix, from userid 1035) id
63A2811457; Thu, 20 Jan 2005 09:35:44 -0600 (CST)
Received: from mail.apache.org (hermes.apache.org [209.237.227.199]) by
smtp.transplace.com (Postfix) with SMTP id B5DDF1148D for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 09:35:34 -0600 (CST)
Received: (qmail 60113 invoked by uid 500); 20 Jan 2005 15:34:49 -0000
Mailing_List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
list_help: <mailto:[EMAIL PROTECTED]>
list_unsubscribe: <mailto:[EMAIL PROTECTED]>
list_post: <mailto:users@spamassassin.apache.org>
List_Id: <users.spamassassin.apache.org>
Delivered_To: mailing list users@spamassassin.apache.org
Received: (qmail 59968 invoked by uid 500); 20 Jan 2005 15:34:47 -0000
Delivered_To: [EMAIL PROTECTED]
Received: (qmail 59936 invoked by uid 99); 20 Jan 2005 15:34:47 -0000
X_ASF_Spam_Status: No, hits=0.0 required=10.0 tests=
X_Spam_Check_By: apache.org
Received_SPF: neutral (hermes.apache.org: local policy)
Received: from mailgate1.dslextreme.com (HELO mailgate1.dslextreme.com)
(66.51.199.94) by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 20 Jan 2005
07:34:45 -0800
Received: from mail5.dslextreme.com (unknown [192.168.7.93]) by
mailgate1.dslextreme.com (Postfix) with SMTP id 80D59630309 for
<[EMAIL PROTECTED]>; Thu, 20 Jan 2005 07:32:11 -0800
(PST)
Received: (qmail 1604 invoked from network); 20 Jan 2005 15:34:42 -0000
Received: from unknown (HELO espphotography.dslextreme.com)
(66.245.217.196) by mail5.dslextreme.com with SMTP; Thu, 20 Jan 2005
07:34:42 -0800
$MessageID: <[EMAIL PROTECTED]>
$Mailer: QUALCOMM Windows Eudora Version 6.2.0.14
PostedDate: 01/20/2005 09:34:36 AM
SendTo: [EMAIL PROTECTED]
From: Evan Platt <[EMAIL PROTECTED]>
Subject: Re: Testing a message
In_Reply_To: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
MIME_Version: 1.0
X_DSLExtreme_MailGate_Information: Please contact the ISP for more
information
X_DSLExtreme_MailGate: Found to be clean
X_MailScanner_From: [EMAIL PROTECTED]
X_Virus_Checked: Checked
X_Spam_Checker_Version: SpamAssassin 2.63 (2004-01-11) on
pfbspmp1.transplace.com
X_Spam_Status: No, hits=-4.9 required=4.0 tests=AWL,BAYES_00 autolearn=ham
version=2.63
X_Spam_Level:
$MIMETrack: Itemize by SMTP Server on psplotp1/com(Release 5.0.11 |July
24, 2002) at 01/20/2005 09:35:44 AM,MIME-CD by Notes Client on Kyle
Reynolds/com(Release 5.0.8 |June 18, 2001) at 01/20/2005 09:44:22
AM,MIME-CD complete at 01/20/2005 09:44:22 AM
SMTPOriginator:
users-return-22435- [EMAIL PROTECTED]
$UpdatedBy:
$Orig:
Categories:
$Revisions:
RouteServers: CN=psplotp1/O=com
RouteTimes: 01/20/2005 09:35:44 AM-01/20/2005 09:35:44 AM
$MsgTrackFlags: 0
DeliveredDate: 01/20/2005 09:35:44 AM
At 07:22 AM 1/20/2005, you wrote:
Greetings!
I'm using SA 3.0.2 with postfix and amavisd. (so no spamd is running)
A message came in that was not spam that got blocked. I took it to
sa-learn and learned it as ham.
I want to take the message now and re-score it to see how it holds up.
What is the best way of accomplishing this?
Someone will I'm sure correct me if I'm wrong...
but back when I was a geek in training, I could save the message to a file,
and run
spamassassin < filename1 > filename2
where filename1 was the original file, filename2 is the output file that SA
would create with the new score.
This may have changed...
Evan
******************************************************************** ** ******************************************************************** ** **************************************
Thanks,
Kyle Reynolds
972-731-4731
[EMAIL PROTECTED]
#!/bin/sh echo "Getting Spam..." /usr/local/bin/fetchmail -f '/home/spamd/.fetchmailrc' server.name.here
echo "Learning Spam..." /usr/local/bin/sa-learn --spam --mbox /var/mail/spamd echo "Deleting mail file..." /usr/local/bin/sudo rm -rf /var/mail/spamd
poll server.name.here
proto pop3
no dns
user "[EMAIL PROTECTED]"
pass "password"
nokeep
fetchall#!/bin/sh echo "Getting Ham... mmmmm yummmy!!!" /usr/local/bin/fetchmail -f '/home/spamd/.fetchmailrc_ham' server.name.here echo "Learning Ham... It is a wonderous thing!!!" /usr/local/bin/sa-learn --ham --mbox /var/mail/spamd echo "Deleting mail file..." /usr/local/bin/sudo rm -rf /var/mail/spamd
