On Friday 16 December 2005 05:27, Paul Cartwright wrote:
I am getting a little frustrated, maybe it is just me. I seem to be getting the same junk email over... and over... and over... and over... I have kmail setup with both bogofilter and spamassassin. They are catching a few, but not nearly all. for instance. One I just got this morning in my inbox had these headers: --Bogosity: Ham, tests=bogofilter, spamicity=0.002719, version=0.95.2
Version: SpamAssassin 3.0.1 (2004-10-22) on paulspc -Spam-Level: **** Spam-Status: No, score=4.8 required=5.0 tests=AWL,BAYES_99,FORGED_RCVD_HELO, MISSING_HEADERS,NO_REAL_NAME,US_DOLLARS_3 autolearn=no version=3.0.1
I took out the "X" from the headers so it hopefully won't setoff anyones filters..
notice it says autolearn=no, how can I change that to yes? and how do I change the scoring to a lower level, say 4.5 ??
anything else I can do to make this better??? -- Paul Cartwright Registered Linux user # 367800 X-Request-PGP: http://home.bellsouth.net/p/PWP-pcartwright/key.asc
I have kmail filters together with spamassassin getting about 99% of the spam, with 0% false positives. spamassassin alone was missing about 60% of it. My strategy is thus: 1. Every mail gets virus-checked, viruses moved to virus folder. 2. I assert that certain emails are _not_ spam (white list). If in address book, or from a mailing list I subscribe to, then not spam, and I set the X-Spam-Flag to No. 3/4. I have _many_ email accounts. Two of which I should not get catch-all mail, like for postmaster. For these I have a rule for each one like so: If the To: header contains @domain.com, then it must contain user@domain.com. These prevents spam where domain is correct, but they made up a fake spoofed username. If this rule is false, it it marked as spam, moved to spam folder. 5. I assert what is definitely spam, companies who won't take no for a answer, etc. Those get the X-Spam-Flag set to Yes. Marked as read, marked as spam, moved to spam folder. 6. Now series of rules to file emails into nice subfolders. 7. Now spamassassin gets called. It is set so spam score is 3.0. Now, in #5 is where the magic is. If <any header> contains "mail.opentransfer.com", then it is spam. In my case, this is true with every email over the last year (and accounts for about 48% of all spam over the past year). Also a rule that if Subject contains "=?iso-8859-1", then it is spam. This is used to make the Subject appear gobbledy-gook in the header, yet still display in the mail reader properly. By the time an e-mail gets to spamassassin, it is _very_ likely to be spam, so it works for me to have the score set low. HTH Mark