What I'm trying to do at the moment is look at the headers of what gets through and taking into account the legit mail our users expect, adjust some scores.
One good one to play with is something like "OFUSCATE" (I don't have it in front of me), the fake HTML comments that fool most tests. We get a ton of these daily. I have given these a much higher score and that is helping. Also a lot fo high proportion of images to actual text.
The other has to do with regional issues. On some servers we have clients that dop no business with Asia. Giving certain countries higher scores will pull that rate up further.
Finally, checking open relay and perhaps dns block lists can also help.
The more you can personalize, the better so for your own personal 60 spams, you could change the weights that apply to the things you see in those headers and don't forget the actual hits_required parameter (or is that required_hits?)
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
