-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello John,
Saturday, November 22, 2003, 4:24:01 PM, you wrote: JO> I started using the default setting of 5 in user_prefs. This caught JO> *very* little spam. Most of the Swen virus emails, for example, JO> still get through with scores of about 2.something But marking as JO> spam at 2.5 is already causing too much collateral damage for mailing JO> lists. I have to be missing something really big and important JO> here... :-) 1) The Swen virus is not spam. It should be caught by anti-virus software, not by anti-spam software. 2) yes, you're missing something really big and important, since this week, from 5:45 pm on Nov 15 to 6:15 pm on Nov 22, I processed 4,504 spam, of which 5 managed to sneak through. That's a 99.89% success rate. And I do this with a spam threshold of 9.0 (80% higher than the 5.0 default). What have you missed? Do you have the default network tests turned on? They are VERY useful in catching spam which otherwise scores very low against the default rule set. Do you have Bayes turned on? Bayes is a life saver here. Have you adjusted any of the default scores? Check out my new page at http://www.exit0.us/index.php/RM_DefaultScoreChanges -- if you can't target Swen using an anti-virus program, check out the MICROSOFT_EXECUTABLE rule and score -- I have this set to 15.00, and it catches all live viruses (those with active and executable components). Have you created or adopted any new rules? See the various pages at http://www.exit0.us and the Rules Emporium (link on exit0). Warning: All the score adjustment and rules creation/adoption used a bunch of my time back in the May/June/July time frame, when I was first learning how to use SA properly. Be prepared to put that time into it. But now, of course, with only 5 spam a week getting through, I spend maybe one hour a week tweaking the system. Bob Menschel -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 iQA/AwUBP8AaXx00fGAwIsLEEQJ6awCeMAqIAdWWBU+OCYyfURoLNe+jkp0AoMz3 n6xr+YBGu0e53Bi6yMNLYEL4 =CYJv -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
