Hello robert, Tuesday, September 20, 2005, 12:08:57 PM, you wrote:
rdc> Using Spamassassin 3.1 on Fedora Core 2 running qmail. Spamassassin rules rdc> are running through a MySQL database. rdc> The problem is Im seeing an increase of spam getting through, mainly rdc> pharmecutical. I am using rules dejour and here is a list of all the rules rdc> Im using. Is there a rule that might be causing spam to be slip through? I rdc> am also using bayes and feeding it spam and ham on a daily basis. rdc> SARE_RANDOM rdc> RANDOMVAL I'm not familiar with RANDOMVAL -- is it an earlier version of SARE_RANDOM? If so, you want to avoid the duplication. rdc> ANTIDRUG This was incorporated into SA 3.0 -- remove the duplication. rdc> SARE_RATWARE Obsolete. If you're loading the current file via RDJ, it's empty. Delete it. rdc> SARE_CODING Obsolete. Replaced by SARE_HTML. Delete it. The rules problems you have above would cause false positives, not false negatives. I suspect you're seeing spam we've just developed rules for. Don't hold your breath (unless you can hold it for 24-48 hours), but help is on the way. And with your RDJ configuration, you should receive them automatically (will be in specific, html, header, and obfu). Bob Menschel
