Thanks for the suggestion, But should I run "spamassassin --revoke" or "/usr/lib/razor-revoke" on folder containing such a ham? spamassassin --revoke /ham_folder/* or /usr/lib/razor-revoke /ham_folder/*
Are these tools interchangeable? And again, it seems very strange that a regular message with empty message body and one attachment (hebrewnamedfile.doc) is labeled as a spam. Maybe there is a score on attachment names encodings? May be there is a good idea to play a little with score FROM_ENDS_IN_NUMS, ROUND_THE_WORLD etc.? Best Regards, Leon Kolchinsky -----Original Message----- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Thursday, October 26, 2006 5:04 PM To: users@spamassassin.apache.org Subject: Re: How to avoid spamassassin checks in Subject header? On Thu, Oct 26, 2006 at 04:56:21PM +0200, Leon Kolchinsky wrote: > There is a legitimate e-mail with empty body message but with .doc attachment > (filename is in hebrew) that marked as a spam - > > X-Spam-Status: Yes, hits=5.4 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_44, > FROM_ENDS_IN_NUMS, HTML_MESSAGE, RAZOR2_CF_RANGE_51_100, RAZOR2_CHECK, > ROUND_THE_WORLD > > What would you suggest to eliminate or minimize ‘false positives’ in these > cases? Well, I think the main hits are Razor and Bayes, since the rest are generally out of your control. You can teach Bayes the message is ham, so that'll help out the next time. As for Razor, you can revoke the message, which may cause Razor to lower the confidence (cf) on the message part, and possibly make it not hit the rules anymore. > I’ve seen that some howto’s suggest putting scores in local.cf file and some > into user_prefs. > What is the right way to do it? Do you want the scores to be site-wide (local.cf) or for a specific user (user_prefs) ? -- Randomly Selected Tagline: But I forgot all about the Amnesia Conference!!