Here's something that I'm currently trying out: make a list of mail user agents which are unlikely to be used for spam, and lower the hits for mail that matches. Here's what I currently have:
header NON_SPAM_MAILER_1 X-Mailer =~ /(?:CWMail|Edsamail|eGroups|KMail|MailCity|MIME-tools|Mozilla|Eudora|Yahoo|Evolution|Internet Mail Service|SquirrelMail|Apple Mail|Excite|exmh|Lotus Notes|Opera|Z-Mail|fastmail|Perl|Emacs)/ describe NON_SPAM_MAILER_1 User agent not one often used for spamming header NON_SPAM_MAILER_2 User-Agent =~ /(?:Mutt|Mozilla|Emacs|eGroups|Microsoft-Entourage|SavvySubmit)/ describe NON_SPAM_MAILER_1 User agent not one often used for spamming score NON_SPAM_MAILER_1 -10.0 score NON_SPAM_MAILER_2 -10.0 -- http://dmoz.org | Give a man a match, and he'll be warm for a | minute, but light him on fire, and he'll be The world's largest human edited | warm for the rest of his life. edited web directory directory | ICQ: 132152059 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk