> * If circumstances permit, make use of extensive whitelisting, so that > you can increase the score of rules (or maybe lower the threshold after > which you consider a message to be spam).
When whitelisting, never whitelist just based on a plain sender or author address (such as 'whitelist_from'). Whitelisting should only be based on reliable (or at least: likely to be true) information, so use: whitelist_from_dkim whitelist_from_spf whitelist_auth whitelist_from_rcvd or construct custom rules to whitelist (=add negative score points) based on some other specific chraracteristic of mail to be passed. See man pages for: Mail::SpamAssassin::Conf Mail::SpamAssassin::Plugin::DKIM Mail::SpamAssassin::Plugin::SPF Mark