Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: Spam checking

Hybrid View

  1. #1
    Join Date
    Oct 2005
    Posts
    19
    Rep Power
    10

    Default Spam checking

    This is not clear to me from the documentation.. When I click "junk" is SpamAssassin learning what is and is not spam?

    Right now I'm seeing a lot of spam get through to my mail box and I'm wondering what I can do to maybe fine tune the spam filter, and perhaps maybe add DNS RBLs into postfix..

    - Mike

  2. #2
    Join Date
    Aug 2005
    Location
    San Mateo, CA
    Posts
    4,789
    Rep Power
    19

    Default

    Right now the Junk button just moves the message to the Junk folder. Our plan is to add learning in SA but it's not completed yet. See this thread for some more detail on our plans.

    http://www.zimbra.com/forums/showthr...highlight=spam

  3. #3
    Join Date
    Oct 2005
    Posts
    19
    Rep Power
    10

    Default

    Quote Originally Posted by KevinH
    Right now the Junk button just moves the message to the Junk folder. Our plan is to add learning in SA but it's not completed yet. See this thread for some more detail on our plans.

    http://www.zimbra.com/forums/showthr...highlight=spam
    Is there a way on the command line that I can feed SA a bunch of spam for it to learn?

  4. #4
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default /opt/zimbra/bin/zmtrainsa

    Usage: /opt/zimbra/bin/zmtrainsa <server> <user> <pass> <spam|ham> [folder]

    Basic function is to grab everything from <folder> and train SA to see it as spam|ham.

    If folder is not specified, it assumes you mean the inbox.

  5. #5
    Join Date
    Nov 2005
    Posts
    11
    Rep Power
    10

    Default

    Quote Originally Posted by marcmac
    Usage: /opt/zimbra/bin/zmtrainsa <server> <user> <pass> <spam|ham> [folder]

    Basic function is to grab everything from <folder> and train SA to see it as spam|ham.

    If folder is not specified, it assumes you mean the inbox.
    Hi, I have been using the command line to feed SA all the junk mail that was in my Junk folder and have been doing this now for a while. But I can not see any noticable improvement in the Junk mail collection on the server side. Any ideas ? The numbers I get at the end of each time the command line runs are not so consistent either i.e. the line
    synced Bayes databases from journal in 3 seconds: 1739 unique entries (1841 total entries)
    at the end of the process has very different numbers every time. I would have expected the total number to just keep going up !

    I have not used SPAMASSASSIN before so perhaps some of this is a little newbie. Any help is most appreciated.

    - Roger

  6. #6
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default sa training

    The numbers don't just go up, since SA stores a hash of every message that it learns from - so if you train on your junk folder, and it doesn't contain any new (to SA) messages, then the db count won't increase.

    You'll see in the output "learned from 1 message" or "0 messages" as fetchmail feeds the mail through - if 0, then SA has seen the message before.

  7. #7
    Join Date
    Nov 2005
    Posts
    11
    Rep Power
    10

    Default

    Quote Originally Posted by marcmac
    The numbers don't just go up, since SA stores a hash of every message that it learns from - so if you train on your junk folder, and it doesn't contain any new (to SA) messages, then the db count won't increase.

    You'll see in the output "learned from 1 message" or "0 messages" as fetchmail feeds the mail through - if 0, then SA has seen the message before.
    Thanks for the reply Marc. I did notice that but it seems that although its being trained its not killing or tagging the Junk messages. Could this be because the percentages of 30:75 are too high and should be lowered ? Any suggestions would be most appreciated.

    - Roger

  8. #8
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default spamassassin voodoo

    When all is said and done, this boils down to what works for you.

    To catch more, lower the values - though I suggest that you only modify the TAG value, and not the KILL value - since false positives on the KILL value is mail that you'll never get back.

    Also - go slow! Change it a bit, watch the spam (or, even better, grab a known spam base, and feed it through, and get the count of what it catches.) Then change it some more.

    The hardest part of this process is that you'll have to go through your spam folder watching carefully for false positives.

  9. #9
    Join Date
    Nov 2005
    Posts
    11
    Rep Power
    10

    Default

    Quote Originally Posted by marcmac
    When all is said and done, this boils down to what works for you.

    To catch more, lower the values - though I suggest that you only modify the TAG value, and not the KILL value - since false positives on the KILL value is mail that you'll never get back.

    Also - go slow! Change it a bit, watch the spam (or, even better, grab a known spam base, and feed it through, and get the count of what it catches.) Then change it some more.

    The hardest part of this process is that you'll have to go through your spam folder watching carefully for false positives.
    Thanks Marc, I will have a go. I get about 1000 SPAM mails a day ! The Junk mail filter in Thunderbird gets about 90% of these on a regular basis. What I have noticed is that at the moment VERY few are caught eventhough I am training the SA. What happens is that the mail in the inbox that is SPAM becomes READ but does not seem to move any where ! Not sure why this would happen. I will change tha value of the TAG and see how things change. But fundamentally it seems that the Junk mail filter algorithm in Thunderbird is doing a very good job compared to SA.

    thanks
    - Roger

  10. #10
    Join Date
    Oct 2005
    Posts
    96
    Rep Power
    10

    Default

    After teaching SA will it now run this way for all users? I'm assuming yes.

Similar Threads

  1. Trying to understand Zimbra's anti-spam system
    By TaskMaster in forum Users
    Replies: 11
    Last Post: 01-25-2008, 09:59 AM
  2. having some trouble in install to FC6 X 64
    By Max Ma in forum Installation
    Replies: 2
    Last Post: 07-13-2007, 10:46 PM
  3. Replies: 13
    Last Post: 05-15-2007, 07:41 AM
  4. 3.0 to 4.5.3 Upgrade failed (mysql error)
    By dealt in forum Installation
    Replies: 35
    Last Post: 03-19-2007, 11:30 PM
  5. Replies: 2
    Last Post: 02-08-2007, 12:49 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •