Florin Andrei wrote: > I'm using SA since... well, a long time ago, and one thing that i > noticed was a pattern in the way its efficiency varies: it's pretty > good soon after a new release, then it gets continuously worse; then > a new release and all of a sudden it's good again, then it starts > "decaying" again... > > Well, it's been a while since the last release, and it's already > noticeably worse. I know this has been discussed before, i am aware of > the VirusScannerTypeUpdates FAQ entry, but you know what, from an end- > user's point of view, it does not matter. All that matters is that, > despite brilliant technical discussions, the efficiency is going down > and, if a new version is not released soon enough, the users start to > complain. This is what's happening right now. > > I guess something has to change. "Then change it yourself" type of > advices will go straight to /dev/null, thank you, because as far as SA > is concerned, i'm just a user. I am merely pointing out the problem.
How do you mean "getting worse"? Are you saying that it's suddenly letting through messages that it would have stopped previously? Or that the spammers and their obfuscation techniques are changing and now getting around the rulesets you're using? I understand that you're not in a position to make the code changes yourself, but those that are need the details of your problem in order to be able to fix it - or even diagnose it. Perhaps you simply need new rules, or to update the rulesets you're already using? I'm not a coder either, but I may start down that road anyway. Then again, now that I've finally upgraded to 3.0.2, I'm finding/tagging over 99% of the spam I'm getting, and blocking outright almost 50% (with a block threshhold of 18, no less). -Don
