spam/bayes learning and moving false-positive messages

[karnz]

Hi,

Does PMG deletes e-mail from /var/spool/pmg/cluster/* if admin chose to deliver false-positive message from quarantine page to receiver already?

I usually use sa-learn command to improve bayes by learning spam messages from /var/spool/pmg/cluster/ as it contains definitely spam and virus messages filtered by PMG.
However, last week I normally seen that almost every messages matched BAYES_99 and BAYES_999 which gives score of 5 plus 0.2 and that made cleaned mail to be spam certainly.
Then I tried to deliver a message from spam quarantine to receiver but that message still there in /var/spool/pmg/cluster/. Is that normal?

Another question, how to reset bayes score? or just delete /root/.spamassassin/bayes* ?

Thanks.

 

[Stoiko Ivanov]

Does PMG deletes e-mail from /var/spool/pmg/cluster/* if admin chose to deliver false-positive message from quarantine page to receiver already?

not synchronously - the mail is marked as delivered in the database for that user - the file remains on the disks for various reasons e.g.:
* some mails get sent to multiple users on the same domain - only one copy of the mail exists

Mails get deleted asynchronously with the pmg-spamreport.timer daily at 00:05

I usually use sa-learn command to improve bayes by learning spam messages from /var/spool/pmg/cluster/ as it contains definitely spam and virus messages filtered by PMG.

Depending on your rule-setup this could cause quite a few false positives - since usually you don't put definitive spam in the quarantine (but rather block it) - the quarantine is used for the border-cases where it's not sure whether it's spam or ham

Another question, how to reset bayes score? or just delete /root/.spamassassin/bayes*

this should work - it should also get reset/wiped if you disable the bayes function in the GUI and enable it again

I hope this helps!