Classification: PUBLIC
If anyone is interested....
I run a low/medium volume (35,000/day), site-wide SA corporate installation
behind Postfix. Here's my local.cf updates that seem to have tuned things
well for me.
BTW: I kill messages 7.0 and higher (but carboncopy headers to MBOX). I
carboncopy full messages between 5.5 and 8 into an MBOX for FP review
Local.cf
---------------------------------------------
rewrite_subject 1
spam_level_stars 1
subject_tag **_HITS_*
report_header 1
use_terse_report 0
defang_mime 0
skip_rbl_checks 0
check_mx_attempts 2
check_mx_delay 5
allow_user_rules 0
ok_locales all
auto_whitelist_path /var/spool/spamassassin/auto-whitelist
auto_whitelist_file_mode 0666
#timelog_path /tmp/satiming
razor_config /home/filter/.razor/razor-agent.conf
dcc_path /usr/local/bin/dccproc
pyzor_path /usr/bin/pyzor
dcc_add_header 1
pyzor_add_header 1
rbl_timeout 2
dcc_timeout 3
pyzor_timeout 3
razor_timeout 5
required_hits 5.5
score PYZOR_CHECK 2.5
score DCC_CHECK 3.0
score USER_IN_BLACKLIST 20.0
score USER_IN_WHITELIST -20.0
##I hate the super negative or postive scores, so I limit white and black to
20
#score RAZOR2_CHECK 0.0
score RAZOR_CHECK 0.0
##Tweaks to lower FPs
score SUBJECT_IS_NEWS -3.1
score SUBJECT_MONTH -1.5
score SUBJECT_MONTH_2 -1.5
score FROM_US_PHONE -3.1
score FROM_EGROUPS -1.5
score GROUPS_YAHOO_1 -1.0
score NO_MX_FOR_FROM 1.6
score RCVD_IN_RFCI 1.2
score RCVD_IN_ORBS 0.0
##Low Risk, Active RBLS
score RCVD_IN_RELAYS_ORDB_ORG 3.0
header RCVD_IN_MONKEYS rbleval:check_rbl('relay',
'proxies.relays.monkeys.com')
describe RCVD_IN_MONKEYS VMC-Received via a relay in MONKEYS
score RCVD_IN_MONKEYS 3.0
##Active RBLS
score RCVD_IN_SBL 2.0
header RCVD_IN_NJABL rbleval:check_rbl('relay',
'dnsbl.njabl.org')
describe RCVD_IN_NJABL VMC-Received via a relay in NJABL
score RCVD_IN_NJABL 2.0
header RCVD_IN_WIREHUB rbleval:check_rbl('relay',
'blackholes.wirehub.net')
describe RCVD_IN_WIREHUB VMC-Received via a relay in WIREHUB
score RCVD_IN_WIREHUB 2.0
##Powerful, but higer risk RBLS
score RCVD_IN_BL_SPAMCOP_NET 1.0
header RCVD_IN_MOENSTED rbleval:check_rbl('relay',
'no-more-funn.moensted.dk')
describe RCVD_IN_MOENSTED VMC-Received via a relay in MOENSTED
score RCVD_IN_MOENSTED 1.0
header RCVD_IN_BLARS rbleval:check_rbl('relay',
'block.blars.org')
describe RCVD_IN_BLARS VMC-Received via a relay in BLARS
score RCVD_IN_BLARS 1.0
header RCVD_IN_FIVETEN rbleval:check_rbl('relay',
'blackholes.five-ten-sg.com')
describe RCVD_IN_FIVETEN VMC-FIVETEN DNSBL of Dialups, DSL, Spam
Sources and Relays
score RCVD_IN_FIVETEN 1.0
header RCVD_IN_XBL rbleval:check_rbl('relay', 'xbl.selwerd.cx')
describe RCVD_IN_XBL VMC-Received unconfirmed spam via eXtreme
Block List
score RCVD_IN_XBL 0.5
----------------------------------------------------------------------
<<Dan>>
Dan Smart
Vulcan Materials
-------------------------------------------------------
This SF.net email is sponsored by: Get the new Palm Tungsten T
handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
