Couple of things: 1) this SA Talk list can help you more if you attach an example of the offending message, complete with headers (all headers, unchanged). That way we can run it through our collection of tweaked rules, and let you know what's working for us. , 2) Mosie on over to Chris Santerre's "Rules Emporium" at, http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm and read the FAQ's and such. I highly recommend the collection of hand crafted recipes there. You'll need to concatenate the whole lot and append it onto the end of your .spamassassin/user_prefs file, if you're running SA from a user account, or plunk them into /etc/mail/spamassassin with a .cf file extension, and restart spamd if you're running that. ALWAYS run 'spamassassin --lint' after adding rules and then run a test message through SA to make sure things are working. Adding all those rules (esp. BigEvil, and the From blacklist) *will* slow down SA noticeably. Only do this if you have the spare cpu cycles and memory necessary to handle the increased load.
Recommended (by me) rule sets: Big Evil: http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf Popcorn/weeds/backhair: http://www.merchantsoverseas.com/wwwroot/gorilla/popcorn.cf Fred's rules: http://www.merchantsoverseas.com/wwwroot/gorilla/90_FVGT.cf Basic new rules: http://www.merchantsoverseas.com/wwwroot/gorilla/nov2rules.cf Stern's blacklist: http://www.stearns.org/sa-blacklist/sa-blacklist.current Those links will likely change, and new Rules will be added to the Emporirium as time goes on, so it is worth checking the top-level page to see the current state of the art. As well as the Rules Emporium, the SA Wiki page (linked from the Emporium)offers more resources: http://www.exit0.us/index.php > -----Original Message----- > From: Geoffrey Lane > Sent: Sunday, December 21, 2003 6:54 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] a few newbie questions > [...] > It's been working fantastic up til now.... I've been getting alot of mail > lately with random words in the subject and body (eg. "Re: > HQJIYGK, trying to > stick" / "leakage larkin six biconcave infelicitous") from random > IPs /email > addresses. > also in the header it says "X-Spam-Status: No, hits=1.3 required=3.0 > tests=HTML_20_30,HTML_IMAGE_ONLY_08, HTML_MESSAGE autolearn=no > version=2.60" > i've already tried using "use_bayes", "bayes_auto_learn" with "1" > switch to > turn it on.. Am I missing anything else? > ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
