Ralf wrote: > hy @all, > the task is to increase the spam recognition level - most mail that is > spam only reaches 3.5 to 3.7. I could set the tag level in amavisd-new > conf to the value, but in order to have a better understanding, I would > like to know, if I should tighten the screw within amavisd-new or within > sa. How important is it to use for example Bayes? Are there any other > possibilities?
> Am Freitag, den 01.09.2006, 10:10 +0200 schrieb Matthias Haegele: >> I recently tested rules_du_jour [2] from: >> SARE Rulesemperorior Webpage[1] > hm, i am going to evaluate this. Nevertheless I was thinking, that it > should be enough to use sa and/or amavisd-new. I wanted to spare myself > from another konfig-file. >> >> It proved to be really useful for me since it pushes spam over the >> "quarantine level", so far i had no false positives. >> You should test it before implementing and read carefully through the >> instructions on the webpage (the PRE Rules are only for SA prior to 3.0 >> etc.) . >> >> btw: (My "spam policy" is rather aggressive it is better for me to >> "lose" some "legitime mail" than getting spam through, this might be >> completely different for you ...) > Actually it isn't (or, I wouldn't like it to be). Since spam is > discarded and at the same time put into spambobs mailbox, I can see, if > there are any false positives. So that's okay for me. > thanks, ralf. >> >> Greetings, hth >> MH >> >> [1] http://www.rulesemporium.com/rules.htm >> [2] http://www.exit0.us/index.php?pagename=RulesDuJour >> Use the latest version of spamassassin, 3.0.x is now way behind IMHO. Use sa-update. A patch for amavisd-new may be needed so it finds the new rules: http://www200.pair.com/mecham/spam/p3.txt Consider FuzzyOcr and ImageInfo plugins: http://www200.pair.com/mecham/spam/image_spam.html https://secure.renaissoft.com/maia/wiki/FuzzyOCR23 http://www.rulesemporium.com/plugins.htm Make sure network tests are enabled: $sa_local_tests_only = 0; Use Bayes Use Razor and DCC and Pyzor (with Pyzor I suggest changing the server) http://marc.theaimsgroup.com/?l=spamassassin-users&m=114956889224487&w=2 I also use: http://marc.theaimsgroup.com/?l=spamassassin-users&m=115637139728022&w=2 Use a local caching name server - it can help considerably with network tests. To see if anything is going on as far as net tests go, you can break out debugging info and try stuff like: spamassassin --lint --debug area=1,dns Here you would want to see: dbg: dns: is Net::DNS::Resolver available? yes spamassassin --lint --debug area=1,uri spamassassin --lint --debug area=1,razor2 spamassassin --lint --debug area=1,dcc spamassassin --lint --debug area=1,pyzor Assuming you are using a recent version of amavisd-new, consider setting up p0f (but I set my scores much lower than what is in the documenation). Search the archives and RELEASE_NOTES for p0f for instructions. Make sure trusted/internal networks is set up properly: http://www.freespamfilter.org/forum/viewtopic.php?t=309 I have done all these things, and even with lowering the scores in the plugins and I have never had less spam in my inbox (and my kill_level is set to 8.0). It scares me sometimes. Gary V ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
