-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> > So, as you see, it didn't pass the five-poit-barrier. I'm getting tired of > adding new lines to the /etc/mail/access... > > Any ideas, will be well received. > a somewhat long term way to deal with this is to report the spam to things like www.spamcop.net, razor, dcc and pyzor. If the spammer is using open relays they'll be listed soon enough on spamcop's blacklist. Additionally, if you report the spam to the various checksum databases, especially when razor2 will start using nilsimsa (fuzzy hash), spams that you've gotten may influence the scores of spams you'll receive. just make sure to strip spamassassin markup or to use report safe tagging, so that the spam gets reported intact. You should donate to spamcop if you intend on using their blacklist. I think spamcop itself may not really help here because it looks like the user is simply using an mta of his/her own: ppp-68-198-28.alternativagratis.com [200.68.198.28] (may be forged) suggests quite bluntly that it is a dialup user. If you are not a site you can enable the mail-abuse.org DUL list in your scores. Since a payment is required for site wide usage these tests are disabled by default. You could also try a more local and immediate solution - since the bayesian classifier is quite confident of the mail's nature, increase it's influence by multiplying all the scores of the bayesean classifier by 1.2, or something like that. The .1 edge you needed to classify it as spam will probably be covered. Good luck! - -- Yuval Kogman ( [EMAIL PROTECTED] | [EMAIL PROTECTED] ) kung foo master: /me whallops greyface with a fnord: neeyah!!!!!!!! et perl hacker. [EMAIL PROTECTED] http://nothingmuch.woobling.org/ gpg:0xEBD27418 http://wecanstopspam.org/ http://www.habeas.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (Darwin) Comment: pgpenvelope 2.10.2 - http://pgpenvelope.sourceforge.net/ iEYEARECAAYFAj8dZssACgkQVCwRwOvSdBiukACeIkxARjvqFlcuq7jbM05NhhKr jnIAnjVZyXU07w+Zr7SGRTEP6X/kCRax =ZiO7 -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here: http://www.vmware.com/wl/offer/345/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
