Make SPAM ASSASSIN work for you... - Page 8

**Edwin** · August 27th, 2006, 5:45 PM

Looks like I've got it working

Quote:

Learning SPAM
Processing /home/bookieb/mail/bookieboy.co.uk/bobevers/SPAM
Learned tokens from 1 message(s) (1 message(s) examined)
Processing /home/bookieb/mail/bookieboy.co.uk/edwin/INBOX/SPAM
Learned tokens from 1 message(s) (1 message(s) examined)
Processing /home/bookieb/mail/bookieboy.co.uk/edwin/SPAM
Learned tokens from 29 message(s) (33 message(s) examined)
Learning HAM
Processing /home/bookieb/mail/bookieboy.co.uk/bobevers/HAM
Learned tokens from 1 message(s) (1 message(s) examined)
Processing /home/bookieb/mail/bookieboy.co.uk/edwin/INBOX/HAM
Learned tokens from 1 message(s) (1 message(s) examined)
Processing /home/bookieb/mail/bookieboy.co.uk/edwin/HAM
Learned tokens from 3 message(s) (4 message(s) examined)
Done

**Edwin** · August 27th, 2006, 6:05 PM

Bah. I wanted to edit my previous topic, but then my connection died

**Bigjohn** · August 27th, 2006, 7:36 PM

Ahh - Look at that!

Code:

Learning SPAM
Processing /home/stegenga/mail/stegenga.net/john/SPAM
Learned tokens from 19 message(s) (397 message(s) examined)
Processing /home/stegenga/mail/stegenga.net/beth/INBOX/SPAM
Learned tokens from 0 message(s) (1 message(s) examined)
Processing /home/stegenga/mail/stegenga.net/beth/SPAM
Learned tokens from 10 message(s) (92 message(s) examined)
Processing /home/stegenga/mail/stegenga.net/mailtrap/SPAM
Learned tokens from 75 message(s) (108 message(s) examined)
Processing /home/stegenga/mail/host-my-site.com/sales/SPAM
Learned tokens from 0 message(s) (6 message(s) examined)
Processing /home/stegenga/mail/emerging-tech.stegenga.net/john/SPAM
Learned tokens from 0 message(s) (2 message(s) examined)
Learning HAM
Processing /home/stegenga/mail/stegenga.net/john/HAM
Learned tokens from 28 message(s) (32 message(s) examined)
Processing /home/stegenga/mail/stegenga.net/beth/HAM
Learned tokens from 9 message(s) (16 message(s) examined)
Processing /home/stegenga/mail/stegenga.net/mailtrap/HAM
Learned tokens from 0 message(s) (0 message(s) examined)
Processing /home/stegenga/mail/host-my-site.com/sales/HAM
Learned tokens from 0 message(s) (0 message(s) examined)
Done

And i'm using cowboy's filter - so I'm only 'learning' spam that is either 4.5-7 that comes to my account, or over 8 - 20 that goes to mail trap automatically. I typically have to pull 1-3 'false positives' from the mailtrap each day, but that's a problem I'm happy to have.

**Edwin** · September 7th, 2006, 11:44 AM

I think I've done something wrong somehow. I keep getting the cronmail, so that is working

, but shouldn't the post stay in the HAM folder?

Also, the subject isn't rewritten with the ***POSSIBLE SPAM*** thing I've set.

**Edwin** · September 7th, 2006, 11:47 AM

Edit doesn't seem to work for me

Quote:

required_score 4.5
rewrite_header 1
subject_tag 1
whitelist_from xxxx

xs4all.nl
whitelist_from xxxx

xs4all.nl

blacklist_from *.bravenet.com

# Enable the Bayes system
use_bayes 1

# Enable or disable network checks
skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1

BTW. Is this the correct way to block mail from bravenet.com?

**Bigjohn** · September 7th, 2006, 12:16 PM

so you have 2 different problems?

1a - No, messages don't stay in the HAM folder. Because ham is good email, it's really easy to put all of today's email into HAM should you need to re-train. We keep SPAM because you need 500 messages just to activate the bayes filter.

1b - Make sure 'rewrite subject' is enabled. You may have entered what you want it re-written to without turning it on.

2 - if you want to block everything from bravenet you simply do:
*.*.bravenet.*

that would get any server / subdomain / mail address. Cowboy may wander through here and correct me if I'm wrong.

**Edwin** · September 7th, 2006, 1:30 PM

Thanks

I've been trying for ages to get rid of Bravenet's mail, but nothing seems to work.

**cowboy** · September 7th, 2006, 2:19 PM

Quote:

required_score 4.5
rewrite_header 1
subject_tag 1
whitelist_from xxxx

xs4all.nl
whitelist_from xxxx

xs4all.nl

blacklist_from *.bravenet.com

Code:

rewrite_header subject **MOGELIJK SPAM**
 
# rewrite_header is set by entering a value only, 
# it does not accept a true/false 1/0
# you need to specify which header to rewrite, 
# ie, subject (you can rewrite to, from, or subject header)
 
delete "subject_tag 1" not used in SA v3
 
blacklist_from *.bravenet.com 
 
# --- *. forget the . use just *
# (*=everything) --- *bravenet* also gets .net, .org, .etc
# But, only by adding -100 to the score
# When using cPanel filtering for SpamAssassin, it has to be the last filter
# in the list or subsequent filters could also process the e-mail.

While this is working, I think you are making SPAM detection a bit complicated and time consuming. I just do not have the time to parse scores and deal with bayes learning.

I will share with you my user_pref file which currently is yielding zero spam. I DO use a filter file later to allow my whitelist deliveries, redirection of matching criteria, and then blackholes all marked SPAM and non-spam blacklists. Spamassassin is not the fool-proof solution to white and black lists, that is done in the filter file.

Code:

required_score 4
rewrite_header subject **_HITS_**
use_bayes 0
score HTML_FONT_SIZE_TINY 4.0
score BEST_PORN 4.0
score HTML_IMAGE_ONLY_04 4
score HTML_IMAGE_ONLY_08 4
score HTML_IMAGE_ONLY_12 4
score HTML_IMAGE_ONLY_16 4
score HTML_IMAGE_ONLY_20 4
score HTML_IMAGE_ONLY_24 4
score HTML_IMAGE_ONLY_28 4
score HTML_IMAGE_ONLY_32 4
score HTML_TINY_FONT 4.0
score MALE_ENHANCE 4.0
score PORN_16 4.0
score URIBL_JP_SURBL 4.0
score HTML_FONT_TINY 4.0
score STOCK_ALERT  4.0
score MIME_BASE64_TEXT 4.0
score US_DOLLARS_3 4.0
score URIBL_SBL 4
score RCVD_IN_BL_SPAMCOP_NET 4
score STRONG_BUY 4
score DRUGS_ERECTILE 4
score FUZZY_REFINANCE 4
score HTML_10_20 4
score HTML_MIME_NO_HTML_TAG 4
score SUSPICIOUS_RECIPS 4
score RCVD_IN_SORBS_DUL 4
score RCVD_IN_NJABL_PROXY 4
score URIBL_OB_SURBL 4
score UPPERCASE_25_50 3.5
score UNPARSEABLE_RELAY 4
score HTML_FONT_FACE_BAD 3.5

Viewing your message headers, SpamAssassin documents which tests it used to calculate the score. To see the list of tests and their default scores, go to http://spamassassin.apache.org/tests.html . I set the score of the definite rules I don't want to my required SPAM score.

**Edwin** · September 7th, 2006, 2:28 PM

Thanks too

August 27th, 2006, 6:05 PM	#65 (permalink)
Edwin Surpassing Dutch Super #1 Joined in Sep 2004 Lives in Arnhem, the Netherlands Hosted on SH98 2,370 posts Gave thanks: 172 Thanked 40 times	Bah. I wanted to edit my previous topic, but then my connection died __________________ sh98

September 7th, 2006, 11:44 AM	#67 (permalink)
Edwin Surpassing Dutch Super #1 Joined in Sep 2004 Lives in Arnhem, the Netherlands Hosted on SH98 2,370 posts Gave thanks: 172 Thanked 40 times	I think I've done something wrong somehow. I keep getting the cronmail, so that is working , but shouldn't the post stay in the HAM folder? Also, the subject isn't rewritten with the *POSSIBLE SPAM* thing I've set. __________________ sh98

September 7th, 2006, 12:16 PM	#69 (permalink)
Bigjohn minor deity Super #1 Joined in Apr 2004 Lives in Georgia Hosted on XEON 7,331 posts Gave thanks: 23 Thanked 93 times	so you have 2 different problems? 1a - No, messages don't stay in the HAM folder. Because ham is good email, it's really easy to put all of today's email into HAM should you need to re-train. We keep SPAM because you need 500 messages just to activate the bayes filter. 1b - Make sure 'rewrite subject' is enabled. You may have entered what you want it re-written to without turning it on. 2 - if you want to block everything from bravenet you simply do: ..bravenet.* that would get any server / subdomain / mail address. Cowboy may wander through here and correct me if I'm wrong. __________________ Proud to be a Surmunity Mod! XEON PASS60 PASS61 Make a fundamental difference! My Sites: Curious about Brewing Beer? Join the community! >>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax Get into an Art museum Victorian London It's your brain -*ON WEB* - mybrainhost.com (under development) What SHOULD Government do? Much Less than it Does!

September 7th, 2006, 1:30 PM	#70 (permalink)
Edwin Surpassing Dutch Super #1 Joined in Sep 2004 Lives in Arnhem, the Netherlands Hosted on SH98 2,370 posts Gave thanks: 172 Thanked 40 times	Thanks I've been trying for ages to get rid of Bravenet's mail, but nothing seems to work. __________________ sh98

September 7th, 2006, 2:28 PM	#72 (permalink)
Edwin Surpassing Dutch Super #1 Joined in Sep 2004 Lives in Arnhem, the Netherlands Hosted on SH98 2,370 posts Gave thanks: 172 Thanked 40 times	Thanks too __________________ sh98

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread: