From: Florin Andrei [mailto:[EMAIL PROTECTED] > > On Wed, 2005-04-06 at 15:53 -0400, Kris Deugau wrote: > > > I'm a little puzzled what you're asking for, then; addon rulesets are > > available from SARE, and somewhere there's a tool to automatically check > > for updates on those rules. > > My impression, after a quick perusal, was that any mentions about SARE and > the like are pretty well "hidden" on the SA main website. Yes, there is a > mention, but there's a big fat "Use at your own risk" warning at the top > of the page. What would a new user think?
The default rules in SA have been carefully tweaked to optimize the scoring. The addition of extra rules can throw off that balance and cause false positives or negatives. So new users should be careful rather than just dumping all the SARE rules into their setup. The extra rules can also increase the memory and processing time required by SA, which may be a problem with older systems. Personally, I try to be fairly conservative. My servers tag spam, but do not modify or drop messages on most accounts. I have found that with the following rulesets, I can leave the spam threshold at 5 and get pretty good results. For my personal email, I have dropped the threshold down to 4 without seeing any extra false positives. I have not tweaked the Bayes_99 score, but I am considering it since my Bayes database seems to be reliable. These are the rules that I use: 70_sare_evilnum0.cf 70_sare_genlsubj0.cf 70_sare_header0.cf 70_sare_html0.cf 70_sare_specific.cf 70_sare_uri0.cf chickenpox.cf weeds.cf Bowie
