Hi, I got my sa ruleset updated with exactly what you have, the "ninja" works well and scores well !!!
But only after a bit of troubleshooting as a few plugins did not updated my configuration correctly . First of all I didn't know they mantle with those (qmail) control files. For most of the spams I easily got score above 10 now. Now I changing my focus to false positive , trying to send emails from the external server or free email accounts such as hotmail and yahoo. Hopefully does not give me much problem before I can move to next step by taking in greyd. Thanks for all your helps. Appreciated. From: Jari Fredriksson [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2008 12:56 PM To: NGSS; users@spamassassin.apache.org Cc: [EMAIL PROTECTED] Subject: Re: SA experts needed here - SPAM examples > Hi Jari, > This is impressive! I am impressed by the high score it > got from your machine's analysis. I think this is what I > am looking for. > The lowest score among the rule is 0.9, it is well way of > my 0.1 total score. I think I really missed out quite a > few things. May I know where I can alter the ruleset? Do > I require additional plugins ? I am using the defaults > plugins set from Qmail-toaster cnt50 . > Well... I use the following rulesets in my sa-update channelfile: ---------------------(/etc/spamassassin/channels.txt)------------------- updates.spamassassin.org sought.rules.yerp.org saupdates.openprotect.com 72_sare_redirect_post3.0.0.cf.sare.sa-update.dostech.net 70_sare_evilnum0.cf.sare.sa-update.dostech.net 70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net 70_sare_html0.cf.sare.sa-update.dostech.net 70_sare_html_eng.cf.sare.sa-update.dostech.net 70_sare_header0.cf.sare.sa-update.dostech.net 70_sare_header_eng.cf.sare.sa-update.dostech.net 70_sare_specific.cf.sare.sa-update.dostech.net 70_sare_adult.cf.sare.sa-update.dostech.net 72_sare_bml_post25x.cf.sare.sa-update.dostech.net 99_sare_fraud_post25x.cf.sare.sa-update.dostech.net 70_sare_spoof.cf.sare.sa-update.dostech.net 70_sare_random.cf.sare.sa-update.dostech.net 70_sare_oem.cf.sare.sa-update.dostech.net 70_sare_genlsubj0.cf.sare.sa-update.dostech.net 70_sare_genlsubj_eng.cf.sare.sa-update.dostech.net 70_sare_unsub.cf.sare.sa-update.dostech.net 70_sare_uri0.cf.sare.sa-update.dostech.net 70_sare_obfu0.cf.sare.sa-update.dostech.net 70_sare_stocks.cf.sare.sa-update.dostech.net ----------------------------------------------------------------------- ---------------------(/etc/cron.hourly/sa-update)---------------------- #!/bin/sh /usr/local/bin/sa-update --allowplugins --channelfile /etc/spamassassin/channels.txt --nogpg && \ /usr/local/bin/sa-compile && \ /etc/init.d/spamassassin reload exit 0 ----------------------------------------------------------------------- In addition to those, I use Botnet -plugin. I don't remember url to get it, but surely someone knows, maybe even google;) Cheers jarif
