[lkml]   [2003]   [Sep]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    Subjectofftopic (Re: Horiffic SPAM)
    On Tue, Sep 23, 2003 at 11:53:04AM -0700, Matt Heler wrote:
    > Hash: SHA1
    > Ive been living in a mail hole theese past few years.. Where does one get this
    > baesyan algorithm ??

    ~/bin/Mail-SpamAssassin-2.60/sa-learn --mbox --spam ~/mail/spam
    ~/bin/Mail-SpamAssassin-2.60/sa-learn --mbox --spam ~/mail/spam-bad

    spam-bad is differentiated because it gets >15 marks, so it gets deleted
    immediatly after learning. (see the docs in the package)

    but make sure to teach the baesyan about your regular email first, the
    number of "ham" must be >= "spam" or your risk losing legitmate email. I
    use my inbox as "ham" (that's around 10000 messages).

    this is the status of my db

    0.000 0 688 0 non-token data: nspam
    0.000 0 9722 0 non-token data: nham

    see now what it returns for these >100k viruses (Bayesian spam
    probability is 99 to 100%)

    -------- cut and paste begin ---------
    pts rule name description
    ---- ---------------------- --------------------------------------------------
    0.1 HTML_MESSAGE BODY: HTML included in message
    1.7 HTML_RELAYING_FRAME BODY: Frame wanted to load outside URL
    5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
    [score: 1.0000]
    0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
    0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
    5.6 IFRAME BODY: IFRAME virus
    3.0 MICROSOFT_EXECUTABLE RAW: Message includes Microsoft executable program
    0.6 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
    0.1 MIME_SUSPECT_NAME RAW: MIME filename does not match content
    1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

    The original message was not completely plain text, and may be unsafe to
    open with some email clients; in particular, it may contain a virus,
    or confirm that your address can receive spam. If you wish to view
    it, it may be safer to save it to a file and open it with an editor.

    [-- Attachment #2: original message before SpamAssassin --]
    [-- Type: message/rfc822, Encoding: 8bit, Size: 142K --]

    Date: Tue, 23 Sep 2003 13:30:38 -0500
    From: "microsoft net message system" <>
    To: "network recipient" <>
    SUBJECT: Bug Advice
    X-Virus-Information: Please visit for more
    X-Virus-Scanner: Found to be clean

    [-- Autoview using lynx -dump '/tmp/mutt.html' --]

    IFRAME: [1]cid:mccexrrgkte

    Undeliverable to
    -------- cut and paste end ---------

    Andrea - If you prefer relying on open source software, check these links:[45]/
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:48    [W:0.022 / U:0.824 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site