On Sun, 21 Oct 2012, dar...@chaosreigns.com wrote:

I believe that means the score was low enough that it was automatically fed
to sa-learn as ham (non-spam).

Correct.

That's scary, I don't use it (bayes_auto_learn 0).

Agreed, but I run a very small installation. I can see where it would be useful at a large installation with few users willing to compentently train misses.

Joe, what exactly do you mean below when you describe the message? The subject was only a FTP link (which the hits suggest is not the case)? Or the subject was empty and the body was only a FTP link?

Perhaps SA should only autolearn when the body of the message is some minimum size, to avoid mislearning on spams like this?

On 10/21, Joseph Acquisto wrote:
Today I found a missed SPAM that contained this in the header:

X-Spam-Status: No, score=0.0 required=5.0 tests=FREEMAIL_FROM,MISSING_SUBJECT,
T_DKIM_INVALID,UNPARSEABLE_RELAY autolearn=ham version=3.3.2

The subject was empty with a link starting with "ftp:"

I guess it's the autolearn that  is most puzzling me.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Politicians never accuse you of "greed" for wanting other people's
  money, only for wanting to keep your own money.    -- Joseph Sobran
-----------------------------------------------------------------------
 143 days since the first successful private support mission to ISS (SpaceX)

Reply via email to