Running SpamAssassin is more of an art than a science. You'll probably
catch more spam by picking up most of the rules at:
http://www.rulesemporium.com/rules.htm
Or better yet, use RulesDuJour:
http://www.exit0.us/index.php?pagename=RulesDuJour
Configure it up to get the rulesets you want, run it once or twice a week
from cron, and you'll rarely have to think about it again. Just make sure to
look at the report mails it sends for notifications of new versions of RDJ,
or for problems with the update process.