Good evening, and good weekend, I made a silly mistake in the dB.
*** What happened Whilst experimenting with some Logwatch options, I increased the granularity. This meant the Email report to me contained content that correctly tripped SA. ). Sadly, this tripped me over & I though SA needed some training so I misguidedly fed the email into sa-learn. This email was neither ham nor spam and should not have been categorised. Oh, the things one does on a Saturday night. *** The question How can I remove the offending tokens from SA? (If at all possible). *** Command used & result # sa-learn --ham cur/ Learned tokens from 1 message(s) (102 message(s) examined) *** The SA message headers X-Spam-Status: Yes, score=6.9 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DRUGS_ERECTILE,DRUG_ED_ONLINE,FSL_RU_URL,NORMAL_HTTP_TO_IP, NO_RELAYS,URI_HEX shortcircuit=no autolearn=no version=3.3.1 X-Spam-Report: * 1.2 DRUG_ED_ONLINE BODY: Fast Viagra Delivery * -0.0 NO_RELAYS Informational: message was not relayed via SMTP * 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL * 1.3 URI_HEX URI: URI hostname has long hexadecimal sequence * 2.3 FSL_RU_URL URI: FSL_RU_URL * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's * domain * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily * valid * 2.2 DRUGS_ERECTILE Refers to an erectile drug Best wishes, S