I made the adjustments you recommended and these spams are now getting caught. I was always apprehensive about using public generated corpuses or lists due to possible poisoning. I will give this a shot and see how it turns out.
all your help is truly appreciated Regards Matus UHLAR - fantomas wrote: > > On 24.09.10 13:03, njjrdell wrote: >> we have setup on our mailservers. >> sbl-xbl.spamhaus.org > > this is obsolete, you should use zen.spamhaus.org instead > >> dnsbl.njable.org > > should be dnsbl.njabl.org, is this a mistype in your mail or in your > server > configuration? > >> bl.spamcop.net >> b.barracudacentral.org > > and finally, this is your mail server ocnfiguration, not spamassassin. > Spamassassin can check for much more than just connecting IP. > >> We are not doing any other network tests. I will look into it. can you >> please recommend specifics > > yes, simply turn network tests on. there's much more than blacklist check > from connecting IP - deep header parsing, URIBL's, fuzzy hash checks... > > -- > Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. > We are but packets in the Internet of life (userfriendly.org) > > -- View this message in context: http://old.nabble.com/What-rules-should-be-stopping-these-tp29801831p29815753.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.