Training spamassassin with previously scanned messages - Unix

This is a discussion on Training spamassassin with previously scanned messages - Unix ; Greetings folks. Quick question I can't seem to find the answer to anywhere else: Can you train SpamAssassin with messages that have already been scanned by SA and that have SA headers in them? Ex: >From user@example.com Wed Dec 27 ...

+ Reply to Thread
Results 1 to 3 of 3

Thread: Training spamassassin with previously scanned messages

  1. Training spamassassin with previously scanned messages

    Greetings folks.

    Quick question I can't seem to find the answer to anywhere else:

    Can you train SpamAssassin with messages that have already been
    scanned by SA and that have SA headers in them?

    Ex:

    >From user@example.com Wed Dec 27 18:04:42 2006

    Received: from localhost by host.example.net
    with SpamAssassin (2.63 2004-01-11);
    Wed, 27 Dec 2006 18:04:42 -0800
    From: user@example.com
    To: undisclosed-recipients:;
    Subject: V|@@GRA!!!!
    Date: Wed, 27 Dec 2006 18:04:29 -0800 (PST)
    Message-Id: <20061228020429.44D9CA0@host.example.net>
    X-Spam-Flag: YES
    X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
    host.example.net
    X-Spam-Level: *********
    X-Spam-Status: Yes, hits=9.6 required=5.0 tests=DRUGS_ERECTILE,
    DRUGS_ERECTILE_OBFU,FORGED_YAHOO_RCVD,MSGID_FROM_M TA_SHORT,
    NO_REAL_NAME,PLING_PLING,SARE_OBFU_VIAGRA autolearn=no
    version=2.63
    MIME-Version: 1.0
    Content-Type: multipart/mixed; boundary="----------
    =_4593263A.ECE2B3E4"

    This is a multi-part message in MIME format.

    ------------=_4593263A.ECE2B3E4
    Content-Type: text/plain
    Content-Disposition: inline
    Content-Transfer-Encoding: 8bit

    Spam detection software, running on the system "host.example.net", has
    identified this incoming email as possible spam. The original message
    has been attached to this so you can view it (if it isn't spam) or
    block
    similar future email. If you have any questions, see
    postmaster@example.com for details.

    Content preview: testing [...]

    Content analysis details: (9.6 points, 5.0 required)

    pts rule name description
    ---- ----------------------
    --------------------------------------------------
    0.3 NO_REAL_NAME From: does not include a real name
    1.7 SARE_OBFU_VIAGRA BODY: found apparent obfuscation of word
    used in spam
    3.3 MSGID_FROM_MTA_SHORT Message-Id was added by a relay
    0.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received'
    headers
    1.5 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug
    1.0 DRUGS_ERECTILE Refers to an erectile drug
    1.3 PLING_PLING Subject has lots of exclamation marks



    ------------=_4593263A.ECE2B3E4
    Content-Type: message/rfc822; x-spam-type=original
    Content-Description: original message before SpamAssassin
    Content-Disposition: inline
    Content-Transfer-Encoding: 8bit

    Return-Path:
    X-Original-To: domains@example.com
    Delivered-To: domains@localhost.example.com
    Received: from host2.example.com (unknown [172.27.2.210])
    by host.example.net (Postfix) with SMTP id 44D9CA0
    for ; Wed, 27 Dec 2006 18:04:29 -0800
    (PST)
    Subject: V|@@GRA!!!!
    Message-Id: <20061228020429.44D9CA0@host.example.net>
    Date: Wed, 27 Dec 2006 18:04:29 -0800 (PST)
    From: user@example.com
    To: undisclosed-recipients:;


  2. Re: Training spamassassin with previously scanned messages

    pbeckhelm@gmail.com wrote:

    > Greetings folks.
    >
    > Quick question I can't seem to find the answer to anywhere else:
    >
    > Can you train SpamAssassin with messages that have already been
    > scanned by SA and that have SA headers in them?


    You can:

    from sa-learn man page (SA 3.1.x)
    SpamAssassin remembers which mail messages it has learnt already, and will
    not re-learn those messages again, unless you use the --forget option.
    Messages learnt as spam will have SpamAssassin markup removed, on
    the fly.

    If you make a mistake and scan a mail as ham when it is spam, or vice
    versa, simply rerun this command with the correct classification, and the
    mistake will be corrected. SpamAssassin will automatically ’for‐
    get’ the previous indications.

  3. Re: Training spamassassin with previously scanned messages

    On Feb 19, 11:46 pm, Rainer Frey wrote:
    > pbeckh...@gmail.com wrote:
    > > Greetings folks.

    >
    > > Quick question I can't seem to find the answer to anywhere else:

    >
    > > Can you train SpamAssassin with messages that have already been
    > > scanned by SA and that have SA headers in them?

    >
    > You can:
    >
    > from sa-learn man page (SA 3.1.x)
    > SpamAssassin remembers which mail messages it has learnt already, and will
    > not re-learn those messages again, unless you use the --forget option.
    > Messages learnt as spam will have SpamAssassin markup removed, on
    > the fly.
    >
    > If you make a mistake and scan a mail as ham when it is spam, or vice
    > versa, simply rerun this command with the correct classification, and the
    > mistake will be corrected. SpamAssassin will automatically 'for-
    > get' the previous indications.


    Fabulous, problem solved! Much appreciated


+ Reply to Thread