Spamassassin tricks

[Steven Crandell]

Take a few minutes to check out the headers of the mail that's slipping past
your filtration.
Look for tests that are consistently hitting but not getting mail up over
your limit.
You can get a full list of all tests performed here (there's three diff
pages, make sure your version matches):
http://spamassassin.apache.org/tests_3_1_x.html
You then are left with some judgement calls on whether you agree with the
default test point settings.
I've opted to customize the following scores.

score   HTML_IMAGE_ONLY_24      5.0
score   DATE_IN_FUTURE_03_06    2.0
score   US_DOLLARS_3            2.0
score   RAZOR2_CHECK            2.0
score   RAZOR2_CF_RANGE_51_100  3.0
score   ALL_TRUSTED             0.0

I'd recommend that you not make any changes without a solid history of
underscoring backing your decision.
Once you've made your changes keep a close eye on what's getting tagged with
your rescored rules.
It's very easy to tag legit mail as spam.
Also ensure that you'd not deleting spam, just move it to alternate folder.
This way if you screw something up at some point, your users still have a
recourse.
Using whitelists also makes it a lot easier to clamp down hard on spam
without increasing your false-positive count.
I'd recommend using whitelist_from_rcvd.


perldoc Mail::SpamAssassin::Conf

-steve



On 9/7/06, Nathan England <nathan at paysonlinux.org> wrote:
>
>
> Anyone have any good spamassassin tricks while I'm on the topic?
> I have mine set to change the header of anything over a 4.0 but it is very
> rare that anything is given over a 4.0. Even spam will only get a few
> points
> over a 4.0
>
> What are people doing to get a 20.0 as some tutorials say to set it at?
> --
> ~~~~~~~~~~~~~~~~~~
> Nathan England
> PaysonLinux User Group
> nathan at paysonlinux.org
> http://www.paysonlinux.org/
>
> Software Development
> Website Development
> Linux Administration
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.plug.phoenix.az.us/pipermail/plug-discuss/attachments/20060907/083e35a3/attachment-0001.htm