You really must meet the SpamAssassin Rules Emporium and its ninjas. These wonderful people have spent a great deal of time designing sets of rules for specific types of spam. Then they test them to get the optimal rule scores regarding their false alarm rates and miss rates on largar corpora of ham and spam.
http://www.rulesemporium.com/ is their chief hangout. Choose the rule sets carefully. In many cases they have broken up a category of rules into three levels. The first involves VERY few false alarms. The second is more aggressive and is where I usually stop for myself. The third is very aggressive and prone to more false alarms. So be careful with your selections. An ISP setup might want to be more conservative than a home setup for a family. {^_^} ----- Original Message ----- From: "Walter Jeffries" <[EMAIL PROTECTED]> > I often get spam in that to me looks extremely spammy. > Yet SA doesn't seem to think much of it and pass it with > little to no comment. Below is a very typical example. > The only thing SA noted was FORGED_RCVD_HELO which > given both the subject line and the message content is > rather surprising. > > Why aren't more tests being triggered? > > How do I get more rules to be triggered? (flip side of the coin) > > Unfortunately I can't use custom rules because my host (vonetwork.com) > isn't willing to let users run custom rules. :( How do I stop this sort > of spam? > > This is my first post. In the subject parenthetical I listed "(SA > version=3.0.2, Unix, spamd)". Is that the information that should be > provided when asking a question in this list? > > Cheers, > > -Walter > in Vermont > at the end of a > glorious winter day