On Fri, 2010-04-23 at 11:16 +0530, Tux Techie wrote: > I've inserted "score FH_DATE_PAST_20XX 0" without the quotes to the > end of your local.cf file to disable the rule for 2010 bug.
According to the timestamps the samples are older than your mail. Assuming you restarted spamd, these hits should now be gone and drastically lower your FP rate. > I've googled all the stuff in my local.cf its not inherited from any > setup. Err? The question was, if you added all that stuff to your local.cf, or if someone else who *was* in charge of the mail server added that earlier. > Below is an example of a geniune mail from outside domain marked as > ham for a user and spam for other user > http://pastebin.com/33WGrJ4b Nope, it is not. It is not a mail, as we requested. That's log messages. At least we got the rules hit. And there's the second major issue. All your samples hit DNS_FROM_OPENWHOIS -- which is DEAD for almost 10 months. See bug 6157 [1]. BOTH your problems would NOT have come up, if you would run sa-update at least on a monthly basis. May I strongly suggest to run sa-update? It will fix a bunch of issues magically, after restarting your SA daemon. Hmm, in your previous post you said something about sa-update, and then went to list all stock rule-sets, plus some other files that are more likely to be in /etc/mail/spamassassin... > these are default rules which i fetched from sa-update What do you mean, "fetched"? Where are all these *.cf files you listed on your system? You did not copy them into /etc/mail/spamassassin, did you? guenther [1] https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6157 -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
