Re: Slipping through the cracks

2020-06-19 Thread John Hardin
On Fri, 19 Jun 2020, micah anderson wrote: John Hardin writes: On Fri, 19 Jun 2020, micah anderson wrote: So, what can I do to tweak these rules to score things up more, specifically the rules that provide a low false positive rate[1]. This seems something that should be done programmatical

Re: Slipping through the cracks

2020-06-19 Thread Martin Gregorie
On Fri, 2020-06-19 at 13:54 -0400, micah anderson wrote: > 2. gmail (amusingly saying my amazon prime membership is going to > expire) > That would make an obvious local rule if you're continuing to see messages like that since a Prime expiry notice thats NOT from Amazon is unlikely to be valid:

Re: Slipping through the cracks

2020-06-19 Thread micah anderson
John Hardin writes: > On Fri, 19 Jun 2020, micah anderson wrote: > >> So, what can I do to tweak these rules to score things up more, >> specifically the rules that provide a low false positive rate[1]. This >> seems something that should be done programmatically, and not >> manually. It seems li

Re: Slipping through the cracks

2020-06-19 Thread John Hardin
On Fri, 19 Jun 2020, micah anderson wrote: So, what can I do to tweak these rules to score things up more, specifically the rules that provide a low false positive rate[1]. This seems something that should be done programmatically, and not manually. It seems like what 'masscheck' maybe does gene

Re: How to write a rule to block phishing?

2020-06-19 Thread John Hardin
On Fri, 19 Jun 2020, Daryl Rose wrote: I thought that a 5 was an average number and lowering it improves spam hits, I may end up getting legitimate emails flagged as spam but I can add the address to a whitefrom_list. I read that in more than one location. I believe that I have the required sc

Slipping through the cracks

2020-06-19 Thread micah anderson
Hi folks, I've spent a lot of time tuning our spamassassin setup over the years. Channels, RBLs, pyzor, DCC, bayes, KAM rules, some home spun rules, etc... and things do work fairly well, the rate is very high , but the ones that get through are the ones that are designed to get around the defen

Re: How to write a rule to block phishing?

2020-06-19 Thread LuKreme
On Jun 19, 2020, at 06:06, Daryl Rose wrote: > I thought that a 5 was an average number and lowering it improves spam hits, > I may end up getting legitimate emails flagged as spam but I can add the > address to a whitefrom_list. I read that in more than one location. > > I believe that I ha

Re: How to write a rule to block phishing?

2020-06-19 Thread Daryl Rose
I thought that a 5 was an average number and lowering it improves spam hits, I may end up getting legitimate emails flagged as spam but I can add the address to a whitefrom_list. I read that in more than one location. I believe that I have the required score set to 2.0 or 2.5, or somewhere around