train on viruses?

tallison at tacocat.net tallison at tacocat.net
Tue Feb 24 21:28:59 CET 2004


> What are the pros and cons of training bogofilter with virus emails?
>
> 1.  Does it fill up the wordlist with unneccessary tokens?
> 2.  Does it prejudice bogofilter against all emails that have executable
> attachments?
> 3.  What about polymorphic viruses?
> 4.  How accurate?  How many instances would it need to be accurate?
>
> Questions like that...
>

FWIW:
I use amavisd-new with clamav to scan everything going in and out of my box.
(I haven't figured out how to disable SpamAssassin yet, any hints?)

The quarentined files are deleted and the warning messages are delivered
to a seperate folder before bogofilter.  I don't want to necessarily
delete them outright, but I check it from time to time and delete.




More information about the Bogofilter mailing list