Thanks for the suggestion,

But should I run "spamassassin --revoke" or "/usr/lib/razor-revoke" on folder 
containing such a ham?
spamassassin --revoke /ham_folder/*
or
/usr/lib/razor-revoke /ham_folder/*

Are these tools interchangeable?

And again, it seems very strange that a regular message with empty message body 
and one attachment (hebrewnamedfile.doc) is labeled as a spam.
Maybe there is a score on attachment names encodings?
May be there is a good idea to play a little with score FROM_ENDS_IN_NUMS, 
ROUND_THE_WORLD etc.?




Best Regards,
Leon Kolchinsky



-----Original Message-----
From: Theo Van Dinter [mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 26, 2006 5:04 PM
To: users@spamassassin.apache.org
Subject: Re: How to avoid spamassassin checks in Subject header?

On Thu, Oct 26, 2006 at 04:56:21PM +0200, Leon Kolchinsky wrote:
> There is a legitimate e-mail with empty body message but with .doc attachment 
> (filename is in hebrew) that marked as a spam - 
> 
> X-Spam-Status: Yes, hits=5.4 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_44,
>  FROM_ENDS_IN_NUMS, HTML_MESSAGE, RAZOR2_CF_RANGE_51_100, RAZOR2_CHECK,
>  ROUND_THE_WORLD
> 
> What would you suggest to eliminate or minimize ‘false positives’ in these 
> cases?

Well, I think the main hits are Razor and Bayes, since the rest are generally
out of your control.  You can teach Bayes the message is ham, so that'll help
out the next time.  As for Razor, you can revoke the message, which may cause
Razor to lower the confidence (cf) on the message part, and possibly make it
not hit the rules anymore.

> I’ve seen that some howto’s suggest putting scores in local.cf file and some 
> into user_prefs.
> What is the right way to do it?

Do you want the scores to be site-wide (local.cf) or for a specific user
(user_prefs) ?

-- 
Randomly Selected Tagline:
But I forgot all about the Amnesia Conference!!

Reply via email to