On 2/27/12 5:48 AM, Simon Loewenthal wrote:
seems reasonably well trained. It works well.
I noticed that emails that did not hit BAYES_00 (so no shortcircuit)
were not autolearnt by SA. Even though these were well below the
autolearn threshold of -1.
In the example below, the score was -7.8. Below this, the bayes
settings in the local.cf are listed. A score of beneath -1 should have
been autolearnt.
DCC_CHECK,RCVD_IN_DNSWL_HI,
RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_SAFE,SPF_PASS,T_RP_MATCHES_RCVD,URI_HEX
for each rule triggered, does it have an autolearn flag? you need enough
rules that together score below -1 and do NOT have noautolearn flags.
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
>*| *SECNAP Network Security Corporation
* Best Mobile Solutions Product of 2011
* Best Intrusion Prevention Product
* Hot Company Finalist 2011
* Best Email Security Product
* Certified SNORT Integrator
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.spammertrap.com/
______________________________________________________________________
