<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hello -<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I set up a new MailScanner system with the latest software, version of SpamAssassin with Bayes, etc. a couple of month ago. It was working really well for a while, but in the last week we’ve started getting bombed with loan, medicine spam, etc. The most prevalent spam email of late is the one that has wide but short image that tries to present itself at the top of the email. All the images look the same size across different spam topics and different senders, but of course Outlook blocks the image with a red x.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Well when I look at the score, most have a fairly high score except for the Bayes which will usually be at 50%. So this causes it to be considered non spam. I send tons of these for learning, but no change. The next one will come in with a 50% bayes score. At this point is this considered Bayes Poisoning? Should I start over on Bayes? I manage the system, so I also have an IMAP account to the MS system and created a program that grabs the email out of my IMAP spam folder, sends it for learning, and then saves it in an mbox file. So I have every spam message I’ve ever sent. So would the best course at this point be to start clean on Bayes and then feed all the spam back in?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>FYI, this MS system does filter tons of spam. Yesterday’s count was 6,702 spam caught. But I’ve seen an increase from 1 or 2 a day personally to about 10 - 20, some of them going to Outlook Junk.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>As I’m writing this I just got another one of those image spams about medicate. Here is the score. If my Bayes was reporting right, it would have been considered spam.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>not spam, SpamAssassin (not cached,<o:p></o:p></p><p class=MsoNormal> score=4.733, required 5, BAYES_50 0.80, HTML_MESSAGE 0.00,<o:p></o:p></p><p class=MsoNormal> RDNS_DYNAMIC 0.98, URIBL_DBL_SPAM 1.70, URIBL_JP_SURBL 1.25)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks,<o:p></o:p></p><p class=MsoNormal>Max<o:p></o:p></p></div></body></html>