Re: bogusfilter?

Replies:

Parents:

On Fri, 28 Mar 2003, Dean Jackson wrote:

DJ> I'll also note that the Bayesian analysis within SpamAssassin version
DJ> 2.50 is doing a pretty good job of marking spam, without any formal
DJ> training (it autotrains). In fact, with this enabled, SpamAssassin is
DJ> doing a better job of finding spam than Bogofilter for me (especially
DJ> with whitelists)

I am running only SpamAssassin 2.53 but with Bayesian (auto-learning),
Razor2, DCC and auto-whitelist and all bullt-in RBL lookups. I also payed
for spamcop.net so I have enabled that RBL for my SpamAssassin as well.

I filter out anything with score 1.0 or above and so far I am getting 100%
good results, no false positives or false negatives.

The nice thing I have noticed with 2.50 and later is that non-spam no
longer land around zero but instead gets high minus scores. This while
spam gets very high scores. This is why it works for me with score 1.0 I
guess.

I no longer use the Gerald-inspired whitelist functionality with procmail
that I used to before SpamAssassion. No need anymore.

I get about 500 mail per day and of these 50-100 are spam. SpamAssassin
2.53 works splendid.

Henrik

--
"You're young, you're drunk, you're in bed, you have knives; shit happens."
       -- Angelina Jolie

Re: bogusfilter?

Replies:

Parents:

Henrik Edlund <[email protected]> writes:

> On Fri, 28 Mar 2003, Dean Jackson wrote:
>
> DJ> I'll also note that the Bayesian analysis within SpamAssassin version
> DJ> 2.50 is doing a pretty good job of marking spam, without any formal
> DJ> training (it autotrains). In fact, with this enabled, SpamAssassin is
> DJ> doing a better job of finding spam than Bogofilter for me (especially
> DJ> with whitelists)
>
> I am running only SpamAssassin 2.53 but with Bayesian (auto-learning),
> Razor2, DCC and auto-whitelist and all bullt-in RBL lookups. I also payed
> for spamcop.net so I have enabled that RBL for my SpamAssassin as well.
>
> I filter out anything with score 1.0 or above and so far I am getting 100%
> good results, no false positives or false negatives.
>
> The nice thing I have noticed with 2.50 and later is that non-spam no
> longer land around zero but instead gets high minus scores. This while
> spam gets very high scores. This is why it works for me with score 1.0 I
> guess.

What about those really tricky ones that in my experience gets past
Spamassasin and Bayesian?  The short one or two liners of innocuous
phrases with a uri?  Maybe I'll get those if I add Razor in the mix.
Gerald and I have talked about these and thought about keeping a
blacklist from whois data as Gerald noticed these often belong to a
handful of people with multiple domains.  I was wondering about taking
the content from the uri and running it through bogofilter for a
score.  

> I no longer use the Gerald-inspired whitelist functionality with procmail
> that I used to before SpamAssassion. No need anymore.

I didn't adopt whitelisting until after older version of spamassassin
had some false positives.  Spamassassin's whitelist isn't as nice I'd
like to have it file based like the other.  I cron sed my .mailrc into
my whitelist.

> I get about 500 mail per day and of these 50-100 are spam. SpamAssassin
> 2.53 works splendid.

I should upgrade, I got lazy and went with the debian packaged
version.  sarge is at 2.43 might have to go with sid on this one as
it's 2.53 or build.

--
Ted Guild <[email protected]>
http://www.guilds.net

Re: bogusfilter?

Replies:

  • None.

Parents:

On Thu, 17 Apr 2003, Ted Guild wrote:

TG> What about those really tricky ones that in my experience gets past
TG> Spamassasin and Bayesian?  The short one or two liners of innocuous
TG> phrases with a uri?  Maybe I'll get those if I add Razor in the mix.
TG> Gerald and I have talked about these and thought about keeping a
TG> blacklist from whois data as Gerald noticed these often belong to a
TG> handful of people with multiple domains.  I was wondering about taking
TG> the content from the uri and running it through bogofilter for a
TG> score.

I get those with one of the RBLs or with Razor2 or with DCC. Also they
never get minus scores, or scores below 1, if missed by any of the earlier
mentioned. These are the RBLs that my SpamAssassin employ:

 relays.osirusoft.com
 relays.ordb.org
 relays.visi.com
 sbl.spamhaus.org
 orbs.dorkslayers.com
 opm.blitzed.org
 list.dsbl.org
 ipwhois.rfc-ignorant.org
 hil.habeas.com
 bl.spamcop.net
 dnsbl.njabl.org

Henrik

HURL: fogo mailing list archives, maintained by Gerald Oskoboiny