Topic: autolearn=no How to turn it on

[henry44]

After watching SA filter mail for a while I noticed that autolearn was set to autolearn=no. How do I turn on this feature?

Ver 6.0.1 with SA and Clam as per Knudsen

[azche24]

Hi,

I noticed that autolearn was set to autolearn=no. How do I turn on this feature?

No need to turn anything on: Autolearn ist turned on by default. What you see, is the message that clarifies, that your SA did not autolearn the junkmail, because it was not clearly enough marked as SPAM. Not enough points, so to say.

Do a search in the forums here. The question was answered before.

[henry44]

Thanks............

I did a search, must not have asked the right question.

[azche24]

Sorry, your question was o.k., but i was to short:

First you should check your maillog in server-manager and filter out the autolearn entries.

Mine shows:

May 15 02:13:21 castor spamd[2613]: result: Y  8 - ALL_TRUSTED,BAYES_99,DCC_CHECK,DIGEST_MULTIPLE,DRUGS_ERECTILE,MIME_BASE64_TEXT,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK scantime=2.4,size=716,mid=<DLDIFLOAFFDGPIJFHDIAHKLGCAAA.mickeymcKnight_fe@checkitmail.at>,bayes=1,autolearn=no
May 15 05:57:57 castor spamd[2614]: result: Y 13 - ALL_TRUSTED,BAYES_99,DRUGS_ERECTILE,DRUGS_MUSCLE,DRUG_ED_ONLINE,MIME_BASE64_TEXT,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,SUBJECT_DRUG_GAP_VIA,URIBL_SBL,URIBL_SC_SURBL scantime=14.4,size=1525,mid=<MKMLOILACKEAHOHFOPIHKMKKKJAA.daryl.smiley_ha@pearlpaint.com>,bayes=1,autolearn=spam
May 15 08:37:30 castor spamd[2611]: result: Y 39 - BAYES_99,DATE_IN_FUTURE_12_24,DCC_CHECK,DIGEST_MULTIPLE,DRUGS_ANXIETY,DRUGS_ANXIETY_EREC,DRUGS_DIET,DRUGS_ERECTILE,DRUGS_MANYKINDS,DRUGS_MUSCLE,DRUGS_PAIN,DRUGS_SLEEP,DRUGS_SLEEP_EREC,DRUG_ED_CAPS,DRUG_ED_SILD,FAKE_OUTBLAZE_RCVD,HAIR_LOSS,IMPOTENCE,MONEY_BACK,MORE_SEX,RATWARE_RCVD_PF,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_DSBL,URIBL_SBL,URIBL_SC_SURBL scantime=15.7,size=13341,mid=<010001c55995$631df463$ad27243e@singapore.net>,bayes=1,autolearn=spam
May 15 13:42:43 castor spamd[2610]: result: Y 14 - ALL_TRUSTED,BAYES_99,DATE_IN_PAST_12_24,FAKE_OUTBLAZE_RCVD,HOT_NASTY,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,URIBL_SBL,URIBL_SC_SURBL scantime=13.9,size=1154,mid=(unknown),bayes=1,autolearn=no
May 15 14:28:25 castor spamd[2612]: result: .  0 - ALL_TRUSTED,BAYES_60,MISSING_HEADERS,MISSING_SUBJECT scantime=1.2,size=217,mid=(unknown),bayes=0.731755480342298,autolearn=ham
May 15 16:06:17 castor spamd[2613]: result: . -4 - ALL_TRUSTED,AWL,BAYES_00,NO_REAL_NAME scantime=10.0,size=1269,mid=<24515306.1116165956025.JavaMail.catalina@cluster-3-162>,bayes=1.66533453693773e-16,autolearn=ham
May 15 16:10:21 castor spamd[2614]: result: . -5 - ALL_TRUSTED,AWL,BAYES_00,NO_REAL_NAME scantime=3.3,size=1560,mid=<28965269.1116166208061.JavaMail.catalina@cluster-3-162>,bayes=5.55111512312578e-17,autolearn=ham
May 15 17:10:34 castor spamd[2611]: result: Y 17 - ALL_TRUSTED,BAYES_99,DATE_IN_FUTURE_12_24,DRUGS_ERECTILE,HTML_BACKHAIR_4,HTML_MESSAGE,HTML_NONELEMENT_60_70,MIME_HTML_ONLY,MSGID_DOLLARS,RATWARE_ZERO_TZ,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,SUBJECT_DRUG_GAP_C,URIBL_SBL scantime=6.7,size=1038,mid=<921e01c559f9$4dd74c6d$c201b22c@staginski.de>,bayes=1,autolearn=spam
May 15 17:27:05 castor spamd[2610]: result: . -104 - ALL_TRUSTED,AWL,BAYES_00,EXCUSE_1,NO_REAL_NAME,TO_EMPTY,USER_IN_WHITELIST scantime=3.1,size=1320,mid=<14db48ce41c628c9af0fe8a6f576630d@contribs.org>,bayes=8.21786372284805e-09,autolearn=ham
May 15 19:14:39 castor spamd[2612]: result: Y 20 - ALL_TRUSTED,BAYES_99,DATE_IN_PAST_12_24,DRUGS_ANXIETY,DRUGS_ANXIETY_EREC,DRUGS_DIET,DRUGS_ERECTILE,DRUGS_MANYKINDS,DRUGS_MUSCLE,DRUGS_PAIN,DRUGS_SLEEP,DRUGS_SLEEP_EREC,DRUG_ED_CAPS,DRUG_ED_SILD,HAIR_LOSS,IMPOTENCE,MONEY_BACK,MORE_SEX,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,URIBL_SBL,URIBL_SC_SURBL scantime=15.9,size=13008,mid=<D1H01HAJ0B4AAD8F@franz.com>,bayes=1,autolearn=spam
May 16 05:08:14 castor spamd[9540]: result: Y  9 - ALL_TRUSTED,BAYES_99,DCC_CHECK,DIGEST_MULTIPLE,MIME_BASE64_TEXT,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,REFINANCE_NOW,WHY_PAY_MORE scantime=2.7,size=1016,mid=<BEBBEMAAIFDAFAGEOMBDEEIHOFAB.noe.haasec@attitude.com>,bayes=1,autolearn=no
May 16 10:02:57 castor spamd[9541]: result: . -5 - ALL_TRUSTED,AWL,BAYES_00 scantime=14.1,size=3744,mid=<4288539C.5070303@az-law.de>,bayes=1.11022302462516e-16,autolearn=ham

So you see:

First line has a score of 8 and was not treated by autolearn.
Second line has a score of 13 and WAS treated by autolearn.
Level seems to be 10 Points for SPAM and HAM, right?

Also you see that there are some false positives (=HAM) from JavaMail.catalina....

You just make shure you use the latest antivirus_update.sh from Jesper and let the USA-Script   update your SA regularily. Then it should work. I did not change anything to my SA installation.

[henry44]

Thanks again. I looked at my logs and now that I know what I'm looking for, I see the Baysen filter is in place.