Bayes von Spamassassin unter Verwendung von amavis

[mcdoogle]

Hallo,

ich hab keine Ahnung wie ich den Bayes Filter zum laufen bekommen sollte.
Ich wünsch mir eine Einbindung in mein funktionierendes Mailsystem.

Postfix -> amavis -> spamassassin -> amavis -> postfix -> cyrus

Ich glaub so ungefähr durchläuft eine Mail das System bis sie in den Postfächern vom Cyrus ankommt. Bei dieser Variante mit amavis schaff ich es nicht den Bayes zu aktivieren, da die perUser spamassassin konfigurationen nicht verwendet werden - oder?

Kennt sich jemand gut aus 8)
Danke!

[Joe User]

http://www.gentoo.org/doc/en/mailfilter-guide.xml sollte ausreichend informativ sein...

[mcdoogle]

Ich hab mir die Doku zu Gemüte geführt. Und scheinbar arbeitet der Bayes Filter jetzt auch irgendwie. Aber scheinbar verwendet er für jede Mail ein und dieselbe Bayesstatistik. Und nicht pro User individuell!

Code: Select all

(Tell Spamassissin to use MySQL for bayes data
bayes_store_module              Mail::SpamAssassin::BayesStore::SQL
bayes_sql_dsn                   DBI:mysql:db_spam:localhost:3306
bayes_sql_username              dbspam
bayes_sql_password              passwort

(Tell Spamassissin to use MySQL for AWL data
auto_whitelist_factory          Mail::SpamAssassin::SQLBasedAddrList
user_awl_dsn                    DBI:mysql:db_spam:localhost:3306
user_awl_sql_username           dbspam
user_awl_sql_password           passwort

Mit den paar Zeilen hab ich in den local.cf von Spamassassin die Anbindung an die DB erreicht. Die Datenbanktabellen existieren auch wie in dem Beispiel und ich hab sie auch für 2 User (amavis und einen Useraccount: florian) mit tokens gefüllt.

Laut MYSQL Log wertet der Spamassassin auch für jede Mail aus aber greift immer auf die DB Einträge von user AMAVIS zu! Obwohl die Mail für user florian ist.

An der Stelle komm ich n och nicht weiter!

[stefanpropehan]

Starte mal spamassassin im Debug Modus (-D) und poste mal die entsprechenden Ausgaben aus dem log...

Meiner Meinung nach muss der Benutzername der Email entsprechen an die, die Mail geliefert wird.... also nicht florian sondern florian@diedomain.de -

Am besten mal die Einträge rausnehmen und Spamassassin auf bayes_autolearn Konfigurieren und schauen ob die entsprechenden Einträge in der Bayes Datenbank angelegt werden...

[mcdoogle]

Ich kann den Spamassassin nicht per Hand in Debug Modus starten.
Spamassassin läuft bei mir nicht als Daemon, sondern wird vom Amavis aufgerufen!

Kann ich den dennoch irgendwie dazu bringen debug output zu produzieren?

Ich hab das Gefühl, das der Spamassassin immer die Tabellen des user amavis verwendet, da der Prozess eben vom amavis gestartet wird.

[stefanpropehan]

http://www.gentoo.org/doc/en/mailfilter-guide.xml sollte ausreichend informativ sein...

wenn du Dir das durchgelesen hast... dann solltest du auch wissen wie amavis im Debug Modus gestartet wird

Code: Select all

amavisd debug-sa

[mcdoogle]

Danke für den Hinweis mit dem Debugmode. Das hatte ich übersehen.

So hier mal die vielen vielen Zeilen wenn ich den amavis starte:

May 13 15:45:21 h4740 amavisd-new[3824]: starting. amavisd-new at h4740 amavisd-new-20030616-p10, Unicode aware
May 13 15:45:21 h4740 amavisd-new[3824]: Perl version 5.008004
May 13 15:45:21 h4740 amavisd-new[3824]: Module Amavis::Conf 1.15
May 13 15:45:21 h4740 amavisd-new[3824]: Module Archive::Tar 1.23
May 13 15:45:21 h4740 amavisd-new[3824]: Module Archive::Zip 1.14
May 13 15:45:21 h4740 amavisd-new[3824]: Module Compress::Zlib 1.34
May 13 15:45:21 h4740 amavisd-new[3824]: Module Convert::TNEF 0.17
May 13 15:45:21 h4740 amavisd-new[3824]: Module Convert::UUlib 1.051
May 13 15:45:21 h4740 amavisd-new[3824]: Module DBI 1.46
May 13 15:45:21 h4740 amavisd-new[3824]: Module DB_File 1.808
May 13 15:45:21 h4740 amavisd-new[3824]: Module MIME::Entity 5.417
May 13 15:45:21 h4740 amavisd-new[3824]: Module MIME::Parser 5.417
May 13 15:45:21 h4740 amavisd-new[3824]: Module MIME::Tools 5.417
May 13 15:45:21 h4740 amavisd-new[3824]: Module Mail::Header 1.62
May 13 15:45:21 h4740 amavisd-new[3824]: Module Mail::Internet 1.62
May 13 15:45:21 h4740 amavisd-new[3824]: Module Mail::SpamAssassin 3.000002
May 13 15:45:21 h4740 amavisd-new[3824]: Module Net::Cmd 2.26
May 13 15:45:21 h4740 amavisd-new[3824]: Module Net::DNS 0.48
May 13 15:45:21 h4740 amavisd-new[3824]: Module Net::SMTP 2.29
May 13 15:45:21 h4740 amavisd-new[3824]: Module Net::Server 0.87
May 13 15:45:21 h4740 amavisd-new[3824]: Module Time::HiRes 1.59
May 13 15:45:21 h4740 amavisd-new[3824]: Module Unix::Syslog 0.100
May 13 15:45:21 h4740 amavisd-new[3824]: Found $file at /usr/bin/file
May 13 15:45:21 h4740 amavisd-new[3824]: Found $arc at /usr/bin/arc
May 13 15:45:21 h4740 amavisd-new[3824]: Found $gzip at /bin/gzip
May 13 15:45:21 h4740 amavisd-new[3824]: Found $bzip2 at /usr/bin/bzip2
May 13 15:45:21 h4740 amavisd-new[3824]: Found $lzop at /usr/bin/lzop
May 13 15:45:21 h4740 amavisd-new[3824]: Found $lha at /usr/bin/lha
May 13 15:45:21 h4740 amavisd-new[3824]: Found $unarj at /usr/bin/arj
May 13 15:45:21 h4740 amavisd-new[3824]: Found $uncompress at /bin/uncompress
May 13 15:45:21 h4740 amavisd-new[3824]: No $unfreeze, not using it
May 13 15:45:21 h4740 amavisd-new[3824]: Found $unrar at /usr/bin/unrar -x
May 13 15:45:21 h4740 amavisd-new[3824]: Found $zoo at /usr/bin/zoo
May 13 15:45:21 h4740 amavisd-new[3824]: Found $cpio at /bin/cpio
May 13 15:45:21 h4740 amavisd-new[3824]: Using internal av scanner code for (primary) Clam Antivirus-clamd
May 13 15:45:21 h4740 amavisd-new[3824]: Found secondary av scanner Clam Antivirus - clamscan at /usr/bin/clamscan
debug: SpamAssassin version 3.0.2
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH
debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/bin', keeping.
debug: Final PATH set to: /usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin
debug: ignore: test message to precompile patterns and load modules
debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/mail/spamassassin/init.pre
debug: using "/usr/share/spamassassin" for default rules dir
debug: config: read file /usr/share/spamassassin/10_misc.cf
debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/share/spamassassin/20_compensate.cf
debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/share/spamassassin/20_drugs.cf
debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/share/spamassassin/20_phrases.cf
debug: config: read file /usr/share/spamassassin/20_porn.cf
debug: config: read file /usr/share/spamassassin/20_ratware.cf
debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/share/spamassassin/23_bayes.cf
debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/share/spamassassin/25_spf.cf
debug: config: read file /usr/share/spamassassin/25_uribl.cf
debug: config: read file /usr/share/spamassassin/30_text_de.cf
debug: config: read file /usr/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/share/spamassassin/50_scores.cf
debug: config: read file /usr/share/spamassassin/60_whitelist.cf
debug: config: read file /usr/share/spamassassin/65_debian.cf
debug: using "/etc/mail/spamassassin" for site rules dir
debug: config: read file /etc/mail/spamassassin/local.cf
debug: using "/var/lib/amavis/.spamassassin/user_prefs" for user prefs file
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x99c4cd0)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0x99deb94)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x99cb700)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x99c4cd0) implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x99deb94) implements 'parse_config'
debug: config: SpamAssassin failed to parse line, skipping: rewrite_subject 1
debug: config: SpamAssassin failed to parse line, skipping: subject_tag [SPAM]
debug: config: SpamAssassin failed to parse line, skipping: spam_level_stars 1
debug: config: SpamAssassin failed to parse line, skipping: defang_mime 1
debug: config: SpamAssassin failed to parse line, skipping: use_terse_report 1
debug: config: SpamAssassin failed to parse line, skipping: auto_learn 0
debug: config: SpamAssassin failed to parse line, skipping: (Tell Spamassissin to use MySQL for bayes data
debug: config: SpamAssassin failed to parse line, skipping: (Tell Spamassissin to use MySQL for AWL data
debug: bayes: Using username: amavis
debug: bayes: Database connection established
debug: bayes: found bayes db version 3
debug: bayes: Using userid: 2
debug: Score set 2 chosen.
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: decoding: no encoding detected
debug: Loading languages file...
debug: Language possibly: en,sco
debug: metadata: X-Languages: en sco
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x99c4cd0) implements 'parsed_metadata'
debug: is DNS available? 0
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x99deb94))
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: registering glue method for check_hashcash_value (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x99deb94))
debug: all '*To' addrs:
debug: running body-text per-line regexp tests; score so far=-1.797
debug: running uri tests; score so far=-1.797
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x99c4cd0) implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=-1.797
debug: running full-text regexp tests; score so far=-1.797
debug: Running tests for priority: 500
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x99c4cd0) implements 'check_post_dnsbl'
debug: running meta tests; score so far=-1.797
debug: running header regexp tests; score so far=-0.515
debug: running body-text per-line regexp tests; score so far=-0.515
debug: running uri tests; score so far=-0.515
debug: running raw-body-text per-line regexp tests; score so far=-0.515
debug: running full-text regexp tests; score so far=-0.515
debug: Running tests for priority: 1000
debug: running meta tests; score so far=-0.515
debug: running header regexp tests; score so far=-0.515
debug: SQL Based AWL: Connected to DBI:mysql:db_spam:localhost:3306
debug: auto-whitelist (sql-based) get_addr_entry: No entry found for ignore@compiling.spamassassin.taint.org|ip=none
debug: auto-whitelist (sql-based): ignore@compiling.spamassassin.taint.org|ip=none scores 0/0
debug: AWL active, pre-score: -0.515, autolearn score: -0.515, mean: undef, IP: undef
debug: auto-whitelist (sql-based) finish: Disconnected from DBI:mysql:db_spam:localhost:3306
debug: Post AWL score: -0.515
debug: running body-text per-line regexp tests; score so far=-0.515
debug: running uri tests; score so far=-0.515
debug: running raw-body-text per-line regexp tests; score so far=-0.515
debug: running full-text regexp tests; score so far=-0.515
debug: is spam? score=-0.515 required=5
debug: tests=ALL_TRUSTED,MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_REAL_NAME
debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGID,__UNUSABLE_MSGID

und das blubbert er sobald ich eine Testspammail mit Inhalt:

Code: Select all

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

abschicke!

debug: received-header: parsed as [ ip=131.188.39.25 rdns=faui90u.informatik.uni-erlangen.de helo=f-eckert.com by=mailman.f-eckert.com ident= envfrom= intl=0 id=1A334605007 auth= ]
debug: received-header: cannot use DNS, do not trust any hosts from here on
debug: received-header: relay 131.188.39.25 trusted? no internal? no
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted: [ ip=131.188.39.25 rdns=faui90u.informatik.uni-erlangen.de helo=f-eckert.com by=mailman.f-eckert.com ident= envfrom= intl=0 id=1A334605007 auth= ]
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: decoding: other encoding type (7bit), ignoring
debug: Message too short for language analysis
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: all '*From' addrs: mail@f-eckert.com
debug: forged-HELO: from=uni-erlangen.de helo=f-eckert.com by=f-eckert.com
debug: forged-HELO: mismatch on HELO: 'f-eckert.com' != 'uni-erlangen.de'
debug: all '*To' addrs: florian@f-eckert.com florian@mailman.f-eckert.com tester@mailman.f-eckert.com
debug: running body-text per-line regexp tests; score so far=0.266
debug: running uri tests; score so far=1000.266
debug: bayes: Database connection established
debug: bayes: found bayes db version 3
debug: bayes: Using userid: 2
debug: bayes corpus size: nspam = 1043, nham = 3185
debug: tokenize: header tokens for X-Envelope-From = " <mail@f-eckert.com>"
debug: tokenize: header tokens for *M = " 4284AFFE 3020006 f eckert com "
debug: tokenize: header tokens for *F = "U*mail D*f-eckert.com D*com"
debug: tokenize: header tokens for *u = " Mozilla/5.0 (X11; U; Linux i686; de-AT; rv:1.4.2) Gecko/20040921"
debug: tokenize: header tokens for X-Accept-Language = " de-at, de, en-us, en"
debug: tokenize: header tokens for MIME-Version = " "
debug: tokenize: header tokens for To = "U*florian D*f-eckert.com D*com"
debug: tokenize: header tokens for X-Enigmail-Version = " 0.76.8.0"
debug: tokenize: header tokens for X-Enigmail-Supports = " pgp-inline, pgp-mime"
debug: tokenize: header tokens for *c = " /plain; charset=us-ascii; format=flowed"
debug: tokenize: header tokens for Content-Transfer-Encoding = " 7bit"
debug: tokenize: header tokens for *RT = " "
debug: tokenize: header tokens for *RU = " [ ip=131.188.39.25 rdns=faui90u.informatik.uni-erlangen.de helo=f-eckert.com by=mailman.f-eckert.com ident= envfrom= intl=0 id=1A334605007 auth= ]"
debug: tokenize: header tokens for *r = " f-eckert.com (faui90u.informatik.uni-erlangen.de [131.188.39 ip*131.188.39.25 ]) by mailman.f-eckert.com (Postfix) <florian@f-eckert.com>; "
debug: bayes: tok_get_all: Token Count: 73
debug: bayes token 'HX-Enigmail-Supports:pgp-mime' => 0.000603815937149271
debug: bayes token 'HX-Enigmail-Supports:pgp-inline' => 0.000603815937149271
debug: bayes token 'HX-Enigmail-Version:0.76.8.0' => 0.000647412755716005
debug: bayes token 'H*r:131.188.39' => 0.000778581765557164
debug: bayes token 'H*u:20040921' => 0.000790014684287812
debug: bayes token 'H*UA:20040921' => 0.000790014684287812
debug: bayes token 'HX-Accept-Language:de-at' => 0.000790014684287812
debug: bayes token 'H*r:ip*131.188.39.25' => 0.00149030470914127
debug: bayes token 'H*RU:131.188.39.25' => 0.00149030470914127
debug: bayes token 'H*r:sk:faui90u' => 0.00149030470914127
debug: bayes token 'H*RU:sk:faui90u' => 0.00149030470914127
debug: bayes token 'HX-Envelope-From:sk:mail@f-' => 0.00162537764350453
debug: bayes token 'XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X' => 0.00881967213114754
debug: bayes token 'UD:NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X' => 0.00881967213114754
debug: bayes token 'xjs*c4jdbqadn1.nsbn3*2idnen*gtube-standard-anti-ube-test-email*c.34x' => 0.00881967213114754
debug: bayes token 'UD:XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X' => 0.00881967213114754
debug: bayes token 'UD:34X' => 0.00881967213114754
debug: bayes token 'XJS*C4JDBQADN1NSBN3*2IDNEN*GTUBESTANDARDANTIUBETESTEMAIL*C34X' => 0.00881967213114754
debug: bayes token 'xjs*c4jdbqadn1nsbn3*2idnen*gtubestandardantiubetestemail*c34x' => 0.00881967213114754
debug: bayes token 'H*F:U*mail' => 0.0292829745526442
debug: bayes token 'H*M:eckert' => 0.0333709816669523
debug: bayes token 'H*r:f-eckert.com' => 0.0360834033953607
debug: bayes token 'H*RU:f-eckert.com' => 0.0360834033953607
debug: bayes token 'H*UA:de-AT' => 0.0419251718996409
debug: bayes token 'H*u:de-AT' => 0.0419251718996409
debug: bayes token 'H*F:D*f-eckert.com' => 0.100054845808341
debug: bayes: score = 0
debug: running raw-body-text per-line regexp tests; score so far=994.166
debug: running full-text regexp tests; score so far=994.166
debug: Running tests for priority: 500
debug: running meta tests; score so far=994.166
debug: running header regexp tests; score so far=994.166
debug: running body-text per-line regexp tests; score so far=994.166
debug: running uri tests; score so far=994.166
debug: running raw-body-text per-line regexp tests; score so far=994.166
debug: running full-text regexp tests; score so far=994.166
debug: Running tests for priority: 1000
debug: running meta tests; score so far=994.166
debug: running header regexp tests; score so far=994.166
debug: SQL Based AWL: Connected to DBI:mysql:db_spam:localhost:3306
debug: auto-whitelist (sql-based) get_addr_entry: No entry found for mail@f-eckert.com|ip=131.188
debug: auto-whitelist (sql-based): mail@f-eckert.com|ip=131.188 scores 0/0
debug: auto-whitelist (sql-based) get_addr_entry: No entry found for mail@f-eckert.com|ip=none
debug: auto-whitelist (sql-based): mail@f-eckert.com|ip=none scores 0/0
debug: AWL active, pre-score: 994.166, autolearn score: -5.834, mean: undef, IP: 131.188.39.25
debug: auto-whitelist (sql-based) add_score: Created new entry for mail@f-eckert.com|ip=131.188 with totscore: -5.834
debug: auto-whitelist (sql-based) finish: Disconnected from DBI:mysql:db_spam:localhost:3306
debug: Post AWL score: 994.166
debug: running body-text per-line regexp tests; score so far=994.166
debug: running uri tests; score so far=994.166
debug: running raw-body-text per-line regexp tests; score so far=994.166
debug: running full-text regexp tests; score so far=994.166
debug: auto-learn: currently using scoreset 2, recomputing score based on scoreset 0.
debug: auto-learn: message score: 994.166, computed score for autolearn: 0
debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0, learned-points=-6.1
debug: auto-learn? yes, ham (0 < 0.1)
debug: Learning Ham
debug: all '*From' addrs: mail@f-eckert.com
debug: all '*To' addrs: florian@f-eckert.com florian@mailman.f-eckert.com tester@mailman.f-eckert.com
debug: bayes: Database connection established
debug: bayes: found bayes db version 3
debug: bayes: Using userid: 2
debug: tokenize: header tokens for X-Envelope-From = " <mail@f-eckert.com>"
debug: tokenize: header tokens for *M = " 4284AFFE 3020006 f eckert com "
debug: tokenize: header tokens for *F = "U*mail D*f-eckert.com D*com"
debug: tokenize: header tokens for *u = " Mozilla/5.0 (X11; U; Linux i686; de-AT; rv:1.4.2) Gecko/20040921"
debug: tokenize: header tokens for X-Accept-Language = " de-at, de, en-us, en"
debug: tokenize: header tokens for MIME-Version = " "
debug: tokenize: header tokens for To = "U*florian D*f-eckert.com D*com"
debug: tokenize: header tokens for X-Enigmail-Version = " 0.76.8.0"
debug: tokenize: header tokens for X-Enigmail-Supports = " pgp-inline, pgp-mime"
debug: tokenize: header tokens for *c = " /plain; charset=us-ascii; format=flowed"
debug: tokenize: header tokens for Content-Transfer-Encoding = " 7bit"
debug: tokenize: header tokens for *RT = " "
debug: tokenize: header tokens for *RU = " [ ip=131.188.39.25 rdns=faui90u.informatik.uni-erlangen.de helo=f-eckert.com by=mailman.f-eckert.com ident= envfrom= intl=0 id=1A334605007 auth= ]"
debug: tokenize: header tokens for *r = " f-eckert.com (faui90u.informatik.uni-erlangen.de [131.188.39 ip*131.188.39.25 ]) by mailman.f-eckert.com (Postfix) <florian@f-eckert.com>; "
debug: bayes: seen (522a93a525d67456b08b9a2b74b129378306d8fd@sa_generated) put
debug: bayes: Learned '522a93a525d67456b08b9a2b74b129378306d8fd@sa_generated', atime: 1115991946
debug: is spam? score=994.166 required=5
debug: tests=BAYES_00,FORGED_RCVD_HELO,GTUBE
debug: subtests=__CT,__CTE,__CT_TEXT_PLAIN,__HAS_MSGID,__HAS_SUBJECT,__MIME_VERSION,__MOZILLA_MSGID,__MSGID_OK_HOST,__SANE_MSGID,__USER_AGENT
May 13 15:45:47 h4740 amavisd-new[3827]: (03827-01) Passed, <mail@f-eckert.com> -> <florian@mailman.f-eckert.com>,<tester@mailman.f-eckert.com>, quarantine spam-9b931d26ba7682b06b8f83544b5e5657-20050513-154546-03827-01, Message-ID: <4284AFFE.3020006@f-eckert.com>, Hits: 994.166

Ich hatte vorher auch die DB Tabellen geleert. Er hat wieder eine Zeile in der Tabelle bayes_vars angelegt mit user amavis obwohl die Mail im Postfach von florian gelandet ist.

[mcdoogle]

Was ist los?
Laßt mich jetzt bitte nicht im Stich! Ich hab braf meine DEBUG Messages gepostet :-(


HILFE!!!!

[Roger Wilco]

Only one Bayes database for all users

SpamAssassin, when used on its own, creates a separate Bayes database for each user, so that the idiosyncracies of a given user's e-mail can be used to learn patterns that are optimized for that particular user. When SpamAssassin is called by amavisd-new, however, it is not used in the same way. Only one Bayes database is maintained, and it learns from the collective e-mails of all the users on the system. Some people see this as a flaw, usually because they don't really understand how Bayesian classifiers work.

Unter http://cert.uni-stuttgart.de/archive/su ... 00247.html gibt es einen (IMHO hässlichen) Hack, der das Problem umgeht. Ob du das machen willst, bleibt dir überlassen.

[mcdoogle]

Danke! Das ist mal eine konkrete Aussage das das was ich versuch zu erreichen auf Standartweg garnicht funktioniert!

Ich überleg mir das jetzt auch nochmal! Was findest Du daran "hässlich"?

Wie sind euere Meinungen dazu? Performance ... Sicherheit ... usw.