[Spambayes] Issue with filtering Have good messages in Junk folder even with 6.5 seconds as the processing start delay

douglas cohn douglas.cohn at inetservers.com
Fri Dec 9 19:43:12 CET 2005


 Not using Exchange

Have no other Junk mail/anti spam etc that would move to junk mail.  No
other utilities configured.

Good point though. 

\Sorry I left off subject. Very dumb I know

-----Original Message-----
From: Jesse Pelton [mailto:jsp at PKC.com] 
Sent: Friday, December 09, 2005 1:30 PM
To: douglas cohn; spambayes at python.org
Subject: RE: [Spambayes] (no subject)

I assume from your message headers that you're using Outlook.  If not, you
can ignore everything that follows.

Is SpamBayes the only thing that could be putting messages into your Junk
folder?  The messages are obviously being classified as ham, so SpamBayes
shouldn't put them there.  Exchange servers can be configured to put
messages in the Junk E-mail folder, and (as far as I know) there's nothing
you can do in Outlook to prevent it.

One way to check whether SpamBayes is doing its job properly is to set up
SpamBayes with its own folders (I use "Spam" and "Spam candidates").
Don't add any rules that move messages to those folders.  If anything shows
up in those folders, you'll know that SpamBayes put it there (unless you
did).  Since I don't trust Exchange's filtering, I also tell SpamBayes to
watch the Junk E-mail and Junk E-mail candidates folders and move messages
where they belong.

If you're running SpamBayes 1.0.4, you'll probably find that some number of
messages remain in the Junk folders.  These are messages that Exchange
considered spam but SpamBayes classified as ham.  1.0.4 can't move ham, so
they stay where Exchange put them.  I've had good results with 1.1a1, which
allows the ham to be moved back to the inbox.  (In fact, reviewing your
message it could be that you're already set up as I've suggested except for
this.)

> -----Original Message-----
> From: spambayes-bounces+jsp=pkc.com at python.org
> [mailto:spambayes-bounces+jsp=pkc.com at python.org] On Behalf Of douglas 
> cohn
> Sent: Friday, December 09, 2005 12:25 PM
> To: spambayes at python.org
> Subject: [Spambayes] (no subject)
> 
> For the life of me I do not understand what I need to do to prevent 
> messages with a score of 0% from going into my Junkmail folder.  I 
> have asked this same question several times and have done everything I 
> was told to do, including running a new training with more or less 
> equal amounts of Ham and Spam as well as extending the lag between the 
> time Spambayes kicks in before it allows Outlook filtering to work.
> 
> I allow 6.5 seconds as the processing start delay and the particular 
> message below has a filter set to move it to another folder.  Yet it 
> get placed into Junkmail instead.
> 
> This happens with several of my lists as well.  In that case only some 
> emails do not make it to the filtered folders (many do make
> it) and those
> emails also come up with a Conbined score of 0%.
> 
> I also always move the messages back into the inbox using the NOT SPAM 
> button.
> 
> What am I doing wrongh to have these issues.
> 
> I must add that I do have hundreds of messages per day and yes 
> hundreds are properly caught as spam.  But at least 1 GOOD message 
> with a conbined score of 0% is dropped into the Junk folder.
> 
> I assume I must be doing something wrong since I have trust in the 
> developers of Spam Bayes (as I believe you guys are the best).  I just 
> want to correct my errors to at least eliminate the messages that I 
> have preset Outlook filters on.  I would think 6.5 seconds is enough 
> time since I pop mail every 5 minutes and only get a few messages each 
> go around.
> 
> If I am not being clear please ask me for whatever I need to supply 
> you for more info.  I have included the most recent log and the 
> particular message I am referring to.  The spam clues for the attached 
> original message are below.  I was thinking that part of the issue may 
> be that the message comes from my syslog server but I expected to see 
> somethingh in the clues that would cause spambayes to send it to my 
> Junkmail folder.
> 
> HELP PLEASE
> 
> Thanks
> 
> Regards
> 
> Doug
> 
> 
> 
> 
> 
> Combined Score: 0% (7.70335e-008)
> Internal ham score (*H*): 1
> Internal spam score (*S*): 1.54116e-011
> 
> # ham trained on: 2867
> # spam trained on: 3136
> 
> 38 Significant Tokens
> token                               spamprob         #ham  #spam
> 'to:addr:dcohn'                     0.00600484        491      3
> 'from:addr:ddf-lab.com'             0.0119225         473      6
> 'bytes'                             0.0167286          13      0
> 'skip:+ 60'                         0.0180723          12      0
> 'subject:Syslog'                    0.0412844           5      0
> 'message-id:@ddfserver.ddf-lab.com' 0.0423193         460     22
> '///'                               0.0505618           4      0
> 'from:addr:ddfsyslog'               0.0505618           4      0
> 'folder:'                           0.0652174           3      0
> 'schedule'                          0.0773091          57      5
> 'archive'                           0.0867513          31      3
> '00:00:06'                          0.0918367           2      0
> 'subject:Archive'                   0.0918367           2      0
> 'subject:Kiwi'                      0.0918367           2      0
> 'fri,'                              0.133636           19      3
> 'status'                            0.141242          179     32
> 'file'                              0.141733          289     52
> 'name:'                             0.148819          137     26
> '29.47'                             0.155172            1      0
> '564'                               0.155172            1      0
> 'from:no real name:2**0'            0.172419          975    222
> 'destination'                       0.190021           28      7
> 'date'                              0.198448          237     64
> 'zip'                               0.214085           61     18
> 'to:addr:ddf-lab.com'               0.226544          553    177
> 'skip:d 20'                         0.22802            81     26
> 'skip:- 60'                         0.234469           99     33
> 'source'                            0.236064          107     36
> '2005'                              0.239025         1025    352
> 'time:'                             0.243133           46     16
> 'skip:w 10'                         0.276085          300    125
> 'skip:l 10'                         0.283797          118     51
> 'size'                              0.33287            90     49
> 'new'                               0.365641          863    544
> 'end'                               0.386159          144     99
> 'subject:Report'                    0.624668           12     22
> 'dec'                               0.697494            9     23
> 'report.'                           0.823856           10     52
> 
> Message Stream
> Return-Path: <ddfsyslog at ddf-lab.com> Fri Dec 09 00:00:37 2005
> Received: from mail.ddf-lab.com [209.191.148.194] by 
> webmail.gothamweb.net
> 	with SMTP; Fri, 9 Dec 2005 00:00:37 -0500
> Received: from DDF-DC1 ([192.168.10.37]) by ddfserver.ddf-lab.com with
> 	Microsoft SMTPSVC(5.0.2195.5329); Fri, 9 Dec 2005 00:00:37 -0500
> To: dcohn at ddf-lab.com
> From: ddfsyslog at ddf-lab.com
> Subject: Kiwi Syslog Archive Report
> Date: Fri, 09 Dec 2005 00:00:36 -0500
> Message-ID: <DDFSERVER0GhRPN04rm00005e8f at ddfserver.ddf-lab.com>
> X-OriginalArrivalTime: 09 Dec 2005 05:00:37.0365 (UTC)
> 	FILETIME=[7E847A50:01C5FC7D]
> X-Declude-Sender: ddfsyslog at ddf-lab.com [209.191.148.194]
> X-Declude-Spoolname: 1344859026956.EML
> X-Declude-Scan: Score [0] at 00:00:51 on 09 Dec 2005
> X-Declude-Fail: None
> X-Country-Chain: UNITED STATES->destination
> X-SmarterMail-Spam: SPF_None
> X-Rcpt-To: <douglas.cohn at inetservers.com>
> 
> ///                 Archive Status Report                ///
> ------------------------------------------------------------
> Date and Time:      Fri, 09 Dec 2005 00:00:06
> 
> Schedule name:      New Archive schedule
> Source Folder:      D:\apps\Syslogd\Logs\
> Destination Folder: D:\apps\Syslogd\Dated logs\2005-12-08\
> 
> +-------------------------------+------------+------+------+
> | File name:                    |  File size | Move | Zip  |
> +-------------------------------+------------+------+------+
> | WF2005-12-08.txt              |   29.47 MB |  OK  |  OK  |
> | WF2005-12-09.txt              |  564 Bytes |  OK  |  OK  |
> +-------------------------------+------------+------+------+
> 
> 
> End of report.
> 
> 
> All Message Tokens
> 56 unique tokens
> 
> '///'
> '00:00:06'
> '2005'
> '29.47'
> '564'
> 'and'
> 'archive'
> 'bytes'
> 'cc:none'
> 'content-type:text/plain'
> 'date'
> 'dec'
> 'destination'
> 'end'
> 'file'
> 'folder:'
> 'fri,'
> 'from:addr:ddf-lab.com'
> 'from:addr:ddfsyslog'
> 'from:no real name:2**0'
> 'header:Date:1'
> 'header:From:1'
> 'header:Message-ID:1'
> 'header:Received:2'
> 'header:Return-Path:1'
> 'header:Subject:1'
> 'header:To:1'
> 'message-id:@ddfserver.ddf-lab.com'
> 'move'
> 'name:'
> 'new'
> 'reply-to:none'
> 'report'
> 'report.'
> 'schedule'
> 'sender:none'
> 'size'
> 'skip:+ 60'
> 'skip:- 60'
> 'skip:d 20'
> 'skip:l 10'
> 'skip:w 10'
> 'source'
> 'status'
> 'subject: '
> 'subject:Archive'
> 'subject:Kiwi'
> 'subject:Report'
> 'subject:Syslog'
> 'time:'
> 'to:2**0'
> 'to:addr:dcohn'
> 'to:addr:ddf-lab.com'
> 'to:no real name:2**0'
> 'x-mailer:none'
> 'zip'
> 




More information about the SpamBayes mailing list