Feb 26 08:20:22 selse spamd[1762]: spamd: connection from 127.0.0.1 [127.0.0.1]:59530 to port 783, fd 5
Feb 26 08:20:22 selse spamd[1762]: spamd: setuid to Debian-exim succeeded
Feb 26 08:20:22 selse spamd[1762]: spamd: checking message <E1lFYMI-0003aE-2H@example.com> for Debian-exim:107
Feb 26 08:20:23 selse spamd[1762]: bayes: cannot write to /var/lib/spamassassin/bayes_db/bayes_journal, bayes db update ignored: Permission denied
Feb 26 08:20:23 selse spamd[1762]: spamd: clean message (1.4/5.0) for Debian-exim:107 in 0.9 seconds, 2225 bytes.
Feb 26 08:20:23 selse spamd[1762]: spamd: result: . 1 - BAYES_50,DKIM_INVALID,DKIM_SIGNED,KHOP_HELO_FCRDNS,SPF_HELO_NONE,SPF_NONE,URIBL_BLOCKED scant
ime=0.9,size=2225,user=Debian-exim,uid=107,required_score=5.0,rhost=127.0.0.1,raddr=127.0.0.1,rport=59530,mid=<E1lFYMI-0003aE-2H@example.com>,bayes=0.492334,autolearn=no autolearn_force=no
Feb 26 08:20:23 selse spamd[1761]: prefork: child states: II


#########################################

jenny@selse:/etc/spamassassin$ ls -al /var/lib/spamassassin/bayes_db/
total 16940
drwxrwxr-x 2 debian-spamd debian-spamd     4096 Feb 26 09:15 .
drwxr-xr-x 9 debian-spamd debian-spamd     4096 Nov 23  2018 ..
-rwxrwxr-x 1 debian-spamd debian-spamd 20119552 Feb 25 21:15 bayes_seen
-rw-rw-rw- 1 root         root          5464064 Feb 26 09:15 bayes_toks

#########################################

X-SA-Exim-Connect-IP: 50.3.251.79
X-SA-Exim-Mail-From: north@healthyadvice.cyou
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
	example.com
X-Spam-Level: ****
X-Spam-Status: No, score=4.6 required=4.9 tests=AWL,BAYES_50,
	FROM_SUSPICIOUS_NTLD,FROM_SUSPICIOUS_NTLD_FP,HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,MIME_QP_LONG_LINE,
	PDS_OTHER_BAD_TLD,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RDNS_NONE
	autolearn=no autolearn_force=no version=3.4.2
Subject: Visceral Fat Pushes Your Stomach Out - DISCOVERY
X-SA-Exim-Version: 4.2.1 (built Wed, 08 May 2019 21:11:16 +0000)
X-Spam_score: 4.4
X-Spam_score_int: 44
X-Spam_bar: ++++
X-Spam_report: Spam detection software, running on the system "example.com",
 has NOT identified this incoming email as spam.

###############################################

jenny@selse:/etc/spamassassin$ cat local.cf
# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
# Only a small subset of options are listed below
#
###########################################################################

#   Add *****SPAM***** to the Subject header of spam e-mails
#
 rewrite_header Subject *****SPAM*****


#   Save spam messages as a message/rfc822 MIME attachment instead of
#   modifying the original message (0: off, 2: use text/plain instead)
#
# report_safe 1


#   Set which networks or hosts are considered 'trusted' by your mail
#   server (i.e. not spammers)
#
# trusted_networks 212.17.35.


#   Set file-locking method (flock is not safe over NFS, but is faster)
#
# lock_method flock


#   Set the threshold at which a message is considered spam (default: 5.0)
#
# required_score 5.0


#   Use Bayesian classifier (default: 1)
#
use_bayes 1


#   Bayesian classifier auto-learning (default: 1)
#
bayes_auto_learn 1

bayes_path /var/lib/spamassassin/bayes_db/bayes
bayes_file_mode 0777

#   Set headers which may provide inappropriate cues to the Bayesian
#   classifier
#
bayes_ignore_header X-Bogosity
bayes_ignore_header X-Spam-Flag
bayes_ignore_header X-Spam-Status


#   Some shortcircuiting, if the plugin is enabled
#
ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
#
#   default: strongly-whitelisted mails are *really* whitelisted now, if the
#   shortcircuiting plugin is active, causing early exit to save CPU load.
#   Uncomment to turn this on
#
shortcircuit USER_IN_WHITELIST       on
shortcircuit USER_IN_DEF_WHITELIST   on
shortcircuit USER_IN_ALL_SPAM_TO     on
shortcircuit SUBJECT_IN_WHITELIST    on

#   the opposite; blacklisted mails can also save CPU
#
shortcircuit USER_IN_BLACKLIST       on
shortcircuit USER_IN_BLACKLIST_TO    on
shortcircuit SUBJECT_IN_BLACKLIST    on

#   if you have taken the time to correctly specify your "trusted_networks",
#   this is another good way to save CPU
#
# shortcircuit ALL_TRUSTED             on

#   and a well-trained bayes DB can save running rules, too
#
shortcircuit BAYES_99                spam
shortcircuit BAYES_00                ham

endif # Mail::SpamAssassin::Plugin::Shortcircuit

###################################################

jenny@selse:/etc/spamassassin$ cat v310.pre


# DCC - perform DCC message checks.
#
# DCC is disabled here because it is not open source.  See the DCC
# license for more details.
#
#loadplugin Mail::SpamAssassin::Plugin::DCC

# Pyzor - perform Pyzor message checks.
#
loadplugin Mail::SpamAssassin::Plugin::Pyzor

# Razor2 - perform Razor2 message checks.
#
loadplugin Mail::SpamAssassin::Plugin::Razor2

# SpamCop - perform SpamCop message reporting
#
loadplugin Mail::SpamAssassin::Plugin::SpamCop

# AntiVirus - some simple anti-virus checks, this is not a replacement
# for an anti-virus filter like Clam AntiVirus
#
#loadplugin Mail::SpamAssassin::Plugin::AntiVirus

# AWL - do auto-whitelist checks
#
#loadplugin Mail::SpamAssassin::Plugin::AWL

# AutoLearnThreshold - threshold-based discriminator for Bayes auto-learning
#
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold

# TextCat - language guesser
#
#loadplugin Mail::SpamAssassin::Plugin::TextCat

# AccessDB - lookup from-addresses in access database
#
#loadplugin Mail::SpamAssassin::Plugin::AccessDB

# WhitelistSubject - Whitelist/Blacklist certain subject regular expressions
#
loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject

###########################################################################
# experimental plugins

# DomainKeys - perform DomainKeys verification
#
# This plugin has been removed as of v3.3.0.  Use the DKIM plugin instead,
# which supports both Domain Keys and DKIM.

# MIMEHeader - apply regexp rules against MIME headers in the message
#
loadplugin Mail::SpamAssassin::Plugin::MIMEHeader

# ReplaceTags
#
loadplugin Mail::SpamAssassin::Plugin::ReplaceTags

##############################################################

jenny@selse:/etc/spamassassin$ cat v320.pre


# Check - Provides main check functionality
#
loadplugin Mail::SpamAssassin::Plugin::Check

# HTTPSMismatch - find URI mismatches between href and anchor text
#
loadplugin Mail::SpamAssassin::Plugin::HTTPSMismatch

# URIDetail - test URIs using detailed URI information
#
loadplugin Mail::SpamAssassin::Plugin::URIDetail

# Shortcircuit - stop evaluation early if high-accuracy rules fire
#
# loadplugin Mail::SpamAssassin::Plugin::Shortcircuit

# Plugins which used to be EvalTests.pm
# broken out into separate plugins
loadplugin Mail::SpamAssassin::Plugin::Bayes
loadplugin Mail::SpamAssassin::Plugin::BodyEval
loadplugin Mail::SpamAssassin::Plugin::DNSEval
loadplugin Mail::SpamAssassin::Plugin::HTMLEval
loadplugin Mail::SpamAssassin::Plugin::HeaderEval
loadplugin Mail::SpamAssassin::Plugin::MIMEEval
loadplugin Mail::SpamAssassin::Plugin::RelayEval
loadplugin Mail::SpamAssassin::Plugin::URIEval
loadplugin Mail::SpamAssassin::Plugin::WLBLEval

# VBounce - anti-bounce-message rules, see rules/20_vbounce.cf
#
loadplugin Mail::SpamAssassin::Plugin::VBounce

# Rule2XSBody - speedup by compilation of ruleset to native code
#
# loadplugin Mail::SpamAssassin::Plugin::Rule2XSBody

# ASN - Look up the Autonomous System Number of the connecting IP
# and create a header containing ASN data for bayes tokenization.
# See plugin's POD docs for usage info.
#
# loadplugin Mail::SpamAssassin::Plugin::ASN

# ImageInfo - rules to match metadata of image attachments
#
loadplugin Mail::SpamAssassin::Plugin::ImageInfo


#############################################

BINFILE=/usr/bin/sa-learn

learnbox()
{
#echo "Learning from $1's mailbox $3"
        MAILPREFIX=/home/$1/Maildir/.

    if $BINFILE --$2 ${MAILPREFIX}$3/cur/ & $BINFILE --$2 ${MAILPREFIX}$3/new/
#  if su  $1 --command="$BINFILE --$2 ${MAILPREFIX}$3/cur/" & su  $1 --command="$BINFILE --$2 ${MAILPREFIX}$3/new/"

    then if [ "$4" = "clean" ]
    then

        rm -f ${MAILPREFIX}$3/cur/*
        rm -f ${MAILPREFIX}$3/new/*

    fi
  fi
}

learnbox jenny spam missed-spam clean

#######################################################

Learning from jenny's mailbox missed-spam
Learned tokens from 0 message(s) (0 message(s) examined)
Learned tokens from 0 message(s) (0 message(s) examined)