Hi folks, I'm currently seeing around half the incoming emails rejected at SMTP conversation time (hurray), with spam scores averaging 21 or so. (I play it fairly safe, only scores above 20 get rejected)
The ones that get through have scores between -1 and 7; there doesn't seem to be a middle ground. I currently quarantine anything with a score between 4 and 5 and take a look once a day (if I leave it too long, there're too many messages and I can't check them all). Once or twice a month there'll be some ham in there; I haven't seen any ham in the over 5 score in a long time. There's still too much stuff getting through (10 to 20 messages a day with scores below 4 to each email address, which is better than 400--1000 messages to each email address that are currently thrown away). Does anyone have any ideas for making things better? I do sa-update daily; and have added a few custom rules. One problem is that spamassassin runs on a memory-starved virtual host, so anything that slows it down or makes the ruleset bigger is bad. There's not enough memory to run fuzzyocr or anything (but most of the image spam is being caught anyway). Peter C -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
