Thanks for your reply. I added the last line because according to the list of default rules on the wiki it seemed like a lot of messages might be hitting it and getting a negative score. Obviously i was kind of shooting in the dark on that one... so I will remove the ALL_TRUSTED line. However I have a feeling the problem goes deeper than that, because I added it after already having the problem.
> Your bayes_*_autolearn thresholds need to be widened out. Could you elaborate? I have spam autolearn set to six because I read that was the minimum effective setting, and it seemed like a lot of spam is not getting learned. Conversely, I didn't want to set ham autolearning because it seemed like low scoring spam would be incorrectly learned as ham. Am I not understanding that correctly? -----Original Message----- From: jdow [mailto:[EMAIL PROTECTED] Sent: Thursday, January 12, 2006 1:00 PM To: users@spamassassin.apache.org Subject: Re: spam scores low (Sendmail + smtp-vilter + SA ) From: "Mike Sassaman" <[EMAIL PROTECTED]> > The default local.cf was very minimal, during troubleshooting I added some > things trying to get improvements. This is my current > /etc/mail/spamassassin/local.cf: > > required_score 5 > rewrite_header Subject *****SPAM***** > use_razor2 1 > razor_config /etc/mail/spamassassin/.razor/razor-agent.conf > razor_timeout 600 > # report_safe 1 > # trusted_networks 212.17.35. > # lock_method flock > use_bayes 1 > use_bayes_rules 1 > bayes_path /home/_vilter/.spamassassin/bayes > bayes_auto_learn 1 > bayes_auto_learn_threshold_spam 6 > skip_rbl_checks 0 > rbl_timeout 600 > use_auto_whitelist 0 > score ALL_TRUSTED 0 0 0 0 That bottom line is a severe problem, Mike. It will disable a lot of very helpful tools and rules within SA. Your bayes_*_autolearn thresholds need to be widened out. RBL checks are effectively disabled by your ALL_TRUSTED score. And at least you sensibly have auto whitelist turned off. But your Bayes database is probably effectively poisoned at this point and needs to be erased and started fresh. <rant> And I think the SA gurus should put in an explicit test that prohibits setting the score to zero. It should be setup properly so that ALL_TRUSTED does not hit every time rather than papered over with a zero score. </rant> {^_^}
