We do site wide here, so I've had to make adjustments, too. Not ready to do bayes, yet. Not sure how well it would work for a site wide environment. We do consulting, so most of our FPs used to come from "Dear Sir, look at my resume", flagged with high importance, a subject of only hello, and from a yahoo mail account. You do bring up some good points I'm going to check out, thanks for the help.
-----Original Message----- From: Robert Menschel [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 9:51 PM To: SpamAssassin Talk Cc: 'Mike Kuentz (2)'; '[EMAIL PROTECTED]' Subject: Re[2]: [SAtalk] [RD] MSGID_GOOD_EXCHANGE WARNING: Unsanitized content follows. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Friday, September 5, 2003, 2:37:39 PM, someone posted: ST> Chris Santerre wrote: >>We tend to be very vague on custom negative rules. Spammers are >>listening on this list. Most of it happens off list. really not much >>else we can do about it. ST> So to speak... look @your ham... analyse... and build *your* custom ST> negative scorers :-) Exactly. General ideas: * Look at the SA scores that are already negative, or very low-scoring rules, and test them against your system's corpus. I found one rule which its lots of ham, and hit only one spam, so I score that one rule -3.00 * How good is your Bayes database? I've raised and lowered both extremes of the Bayes tests. Bayes_90 matches my spam threshold. Bayes_10 is very strongly negative. * How well-protected are your email addresses? We have several that are published on the web and get lots of spam. We have several that are used only for private email, and we have several that are only handed out person to person for distribution. The latter two groups can get negative scores in ToCc header rules. * What services do your people subscribe to? Rather than white-listing non-spam newsletters, we sometimes create rules with negative scores to ensure these reach their intended recipient, without allowing spam that masquerades as these newsletters through. * Do your people participate in YahooGroups mailing lists or the like? It's probably not a good idea to create general rules to lower all YG messages, but you can create specific rules to lower the messages from the specific lists you receive. * What specific business are your people in? Much of our mail deals with lumber and building materials. We're therefore able to take words or phrases which don't appear in spam and give them small (emphasis: small) negative scores (when was the last time you saw spam which mentioned "exterior door"?). Hope this helps. Bob Menschel -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 iQA/AwUBP1k9j5ebK8E4qh1HEQIIoQCgolNEOjRyx+qLkyF5Z+lhTX7uEGIAn2Ff 1mf52oDhrN9BViUdM/yRbcpX =WOV6 -----END PGP SIGNATURE----- ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
