|
GMTurner
|
 |
« Reply #90 on: June 01, 2006, 11:40:28 AM » |
|
I get an email newsletter from PC world that consistently gets scores around 115-120... had to add it to the whitelist to let it through...
|
|
|
|
|
Logged
|
The above post was made at a time when I gave a dang and doesn't necessarily reflect my current views or opinions. For those no longer with us ...  Turner's Lounge |
|
|
|
Mike McCollister
|
|
« Reply #91 on: July 15, 2006, 05:46:19 AM » |
|
I have had some spam get through. Is there a way to setup an e-mail address that I can forward spam to to SA learn from that?
Mike
|
|
|
|
|
Logged
|
|
|
|
|
w98
|
|
« Reply #92 on: August 08, 2006, 12:54:46 PM » |
|
You can but if you're only going to train it with spam, then SA isn't going to be as effective. SA needs to learn what you consider non-spam (aka 'ham') as well, which is why I took this approach of scanning two mailboxes (called 'ham' and 'spam').
If you really do just want to unbalance SpamAssassin and only teach it spam, then set up a new mailbox, and alter the Perl script (contact me via private message if you need help) to only look at that mailbox, and only with the --spam option to sa-learn.
Then, you can use IMAP to copy/move the mail into that mailbox.
Unfortunately, literally forwarding messages to the new mailbox will train spamassasin "any incoming Email from Mike's address with a subject line that starts with 'Fwd:' should be considered spam", so you'll want to use IMAP to move the messages.
|
|
|
|
|
Logged
|
|
|
|
imthduke
Newbie
 Offline
Posts: 2
|
|
« Reply #93 on: September 12, 2006, 06:05:57 AM » |
|
This might be of intrest to Spam fighters. I am using 3 antispam programs. Norton, Spam Assassin, mx logic of email defense. I have trained SA with about 2000 emails as per the instructions above. After several weeks of checking spam folder to see which one as catching spam as well as which ones are giving false positives, here is what I am concluding..........
Norton is most reliable to catch spam set to the recommended level, however because it will not allow cut and paste for white and black list, it is harder to use.
Email Defense is next effective.......a surprise to me.
And then SA is a disappointing third.
Of course this is not scientific accurate but my experience. Any other experiences?
|
|
|
|
|
Logged
|
|
|
|
|
w98
|
|
« Reply #94 on: September 12, 2006, 07:30:50 AM » |
|
I think it would be more interesting to know the numeric values of how many Emails they each caught as false positives (how many legit Emails were flagged as spam, and why) or false negatives (how many spam Emails still made it into your mailbox, and why).
Personally, I get the occasional false positive (legit Email in my spam folder) because the legit Email went through a mailing list service that was blacklisted on an RBL list... That's why I like SpamAssassin, because it can show me that "hey this message scored BAYES_00, it's not spam at all, but since it was blacklisted by 3 or 4 different RBL lists, it's total score is 10+ points". So I can use filtering to move messages that are BAYES_00 *back* into my inbox.
|
|
|
|
|
Logged
|
|
|
|
wkeith01
Newbie
Offline
Posts: 3
|
|
« Reply #95 on: October 08, 2006, 02:02:59 AM » |
|
Hello, I'm a 55 yr old ex-long distance lorry driver until I had an accident that nearly killed me, how very un-interesting.
The point I am making is: there are hundreds of thousands of people out there just like me who think it fantastic that they were able to make a website using a program and to be able to make the family tree, edit photo's and write letters once again, not all of us know what Imap is and so on, yet strangely enough we still get filthy spam and junk mail and we would all like to be able to stop it. I was directed here by Lunarpages Support. Although the wiz kid programming of SA is very good, can you not explain it in laymens terms like how do you get to the SA from Outlook how do you set up Imap in fact what is Imap. you have a heading called assumption which is rather patronizing,
-that you assume how to log on to cpanel using your lunarpages account details.
I think we can just about manage that
-that you know how to use Outlook, or know how to configure your e-mail based on my descriptions using outlook. yes I can even do that. You go on to say, to add an Imap account.
Now we are cooking, what is an Imap account and how do you set it up and why do you need it anyway.
The rest of it means absolutely nothing to the layperson like myself.
Is there not some clever person out there who can actually talk old people like me through the procedure of stopping spam.
Best Wishes
wkeith01
sorry if I have offended anybody, it is not my intention.
|
|
|
|
|
Logged
|
|
|
|
|
w98
|
|
« Reply #96 on: October 11, 2006, 12:32:56 PM » |
|
wkeith01, your message raises some good points about speaking in laymen's terms. Unfortunately, most of this message thread is technical in nature, and laymen's terms wouldn't be accurate enough. That's why I made assumptions about certain key points, so that readers would know ahead of time that they would need to understand key terminology and how to perform certain tasks. This message thread is about training SpamAssassin, not a how-to on setting up IMAP, for example. If you want to send me a private message, or Email me at id@w98.us, I'll be more than happy to describe things a little more clearly for you, but I don't want this message thread to go way off-topic and start containing irrelevant discussions that don't have anything to do with training SpamAssassin. Cheers, Ian |
|
|
|
|
Logged
|
|
|
|
|
w98
|
|
« Reply #97 on: October 12, 2006, 12:43:25 PM » |
|
It was reported to me this morning that my script does not work on some LunarPages servers. This is because LP has started implementing a new Email storage system called "maildir" where each message is stored in a separate file inside a folder, instead of all messages being stored in a single file in "mbox" format.
I'll work on a new copy of the script that will try to autodetect the storage mechanism and set it to scan individual files instead of a single file. I'm not sure yet whether this will throw off the counter or not.
Thanks, Tomas, for your suggestion.
-id
|
|
|
|
|
Logged
|
|
|
|
chiphayes
Newbie
Offline
Posts: 2
|
|
« Reply #98 on: October 12, 2006, 06:13:27 PM » |
|
Ian (or whomever can answer this):
I've just read through this thread as, after a year of only minor spam problems, the evil kudzu of the internet is really starting to irratate me.
I use three of my domains here at LP exclusively for email , and would love to get SA working for me via your tutorial. From you latest post, it looks like I may need to wait for a new fix from you (I'm on the omicron server, I think, if that's one of those affected), but regardless, before I attempted your tutorial, I did have one question.
I use POP3 now from Outlook to dl my emails. You state in your tutorial that:
"If your users use POP3 to download their mail, you'll need to teach them how to set up IMAP as well to copy ham/spam into their ham/spam folder pair (generated by the new script)."
Does this mean that, as a user, I would need to delete the account now set up for POP3 and recreate it as an IMAP account? I.e., just delete the POP3 account, and set up Outlook to read the two new IMAP folders that your script creates, and then handle the copying/moving for SPAM/HAM as you describe?
Sorry if this sounds a bit thick, but while I grasp the difference in IMAP and POP3 protocols, I've never peered carefully under the hood of either Outlook or SA, and want to make sure I know what I'm doing before launching your script (or, as it may be, whatever new one you put out now.)
Regardless, thanks for helping the community like this...
Chip Hayes
|
|
|
|
|
Logged
|
|
|
|
|
w98
|
|
« Reply #99 on: October 24, 2006, 10:22:24 PM » |
|
No, leave the Email account there. The creation of an Email account at LunarPages (or any hosting company for that matter) has nothing to do with POP3 or IMAP. POP3 or IMAP are just ways to retrieve the messages from the server.
In a nutshell, POP3 typically connects to the server, and retrieves a copy of all new messages in one shot and then deletes them from the server. IMAP, on the other hand, connects to the server and retrieves a copy of messages one at a time as you request them, and leaves the original copy on the server. Webmail programs, like Horde or Squirrelmail, use IMAP so that copies of messages remain on the server to retrieve later via POP3 (typical usage).
But because SpamAssassin can only train on messeages you've got on the server, in your case omicron, you need to set up a way to get those messages BACK to the server if you use POP3. The easiest way to do this is add a new account setup within Outlook (or Thunderbird, etc), using the exact SAME login/password as you set up for the POP3 retrieval, but set the protocol type to IMAP instead of POP3.
This way, you'll have access to the ham/spam mailboxes that get created by the script, and send COPIES of ham to the server, and to MOVE spam messages to the server, and then let my script scan those folders.
I have a few other things to take care of, but will try to get a new script available in the near future.
-id
|
|
|
|
|
Logged
|
|
|
|
chiphayes
Newbie
Offline
Posts: 2
|
|
« Reply #100 on: October 25, 2006, 10:07:27 AM » |
|
Ian...
Ah, the light dawns.
I get it now. Thanks for that explanation.
I'll wait until you can get a new script up to give it a try.
Thanks!
Chip
|
|
|
|
|
Logged
|
|
|
|
wkeith01
Newbie
Offline
Posts: 3
|
|
« Reply #101 on: October 31, 2006, 04:02:25 PM » |
|
Thank you w98 for your offer of assistance, but will decline on this occasion. I have been receiving spam , also for several weeks my e-mail was down, I would make up an address, send an e-mail to myself and within 10 minutes that address would be down and only myself and LunarPages would know the address. I sent a really nasty support ticket to LunarPages for the attention of Rod, somebody must have read it because with in two minutes of Lunarpages receiving that request all my e-mail accounts came back on line and have not been down since. That is strange. But what is stranger, I forgot my password for the forum so had it e-mailed to me. in the e-mail was an IP address from where the e-mail came from and guess what!! it is the same IP address that is sending me spam, I have the IP address in the blocked folder and could not understand why it was in the good folder as well, from memory I believe that address had sent over 200 good e-mails and over 100 spam e-mails? so what is the point of setting up spamassasin to stop spam, when it is coming from within the hosting company that you are setting up spamassasin with.
Regards and thanks, but no thanks
WKEITH01
|
|
|
|
|
Logged
|
|
|
|
|
Lupine1647
|
|
« Reply #102 on: October 31, 2006, 04:06:11 PM » |
|
Hello: If you are seeing spam coming from a Lunarpages' server, please forward it to abuse@lunarpages.com. |
|
|
|
|
Logged
|
|
|
|
kenwarren
Newbie
Offline
Posts: 2
|
|
« Reply #103 on: November 20, 2006, 01:42:16 PM » |
|
Hi! I'm wondering if there's been any progress on getting an update for maildir format? I can figure out some of the changes, but I'm neither a Unix nor a Perl expert, so I don't seem to be able to completely figure this out. Here's what I've got so far... I think all the changes are in dospam. sub dospam
{
my ($basepath,$config,$clearham,$clearspam) = @_ ;
print "Checking $basepath for spam/myham:\n" ;
if ( -e "$basepath/.myspam" ) {
print "Learning SPAM:\n" ;
print `$salearn --showdots -p $config --spam $basepath/.myspam/cur/` ;
}
if ( -e "$basepath/.myham" ) {
print "Learning HAM:\n" ;
print `$salearn --showdots -p $config --ham $basepath/.myham/cur/` ;
}
# if the flag is set to clear the ham folder, or if it just plain
# doesn't exist, do that work here:
if ($clearham || !(-e "$basepath/.myham" )) {
print "Emptying $basepath/.myham\n" ;
# note: more than this is going to be required, as this only empties a folder,
# it doesn't create one. Not sure what...
print `rm -f $basepath/.myham/cur/*`;
}
# and do the same work for a spam folder
if ($clearspam || !(-e "$basepath/.myspam" )) {
print "Emptying $basepath/.myspam\n" ;
# note: more than this is going to be required, as this only empties a folder,
# it doesn't create one. Not sure what...
print `rm -f $basepath/.myspam/cur/*`;
}
print "\n\n" ;
}
Can anyone offer suggestions as to how to finish getting this working with maildir? Thanks! Ken Warren |
|
|
|
|
Logged
|
|
|
|
|
w98
|
|
« Reply #104 on: November 21, 2006, 07:22:59 AM » |
|
Hi! I'm wondering if there's been any progress on getting an update for maildir format? Can anyone offer suggestions as to how to finish getting this working with maildir? Getting it to work with maildir is the easy part ... what you've written is pretty close, but you'll want to include a * wildcard on the end: print `$salearn --showdots -p $config --spam $basepath/.myspam/cur/*` ; That way, it will learn from all files within the directory. The tricky things that I need to build into the script are: 1. auto-detection of the old mbox format or this new maildir format so I don't have to maintain two different scripts, and 2. that building the subfolders the first time through will work correctly - from what I'm seeing, there's more to it than just running: mkdir .myspam
mkdir .myspam/cur
mkdir .myspam/tmp
mkdir .myspam/new ... that there might be some files in those folders to create the first pass through. Once the folders are made, then yes, just removing the files as you've done should work just fine. But I'd probably want sa-learn to look at both 'cur' and 'new' since the maildir format may have messages in both. I've been pretty busy lately, so I'm sorry for the delay for everyone, but I really hope to get a working script up soon. ian |
|
|
|
|
Logged
|
|
|
|
|
