Re: how effective is your spamassassin setup ?

[Andy Jezierski]

[EMAIL PROTECTED] wrote on 12/14/2005 04:01:43 AM:

> BTW, we have other (older I guess) rules as well in our rules directory,
> this is the current list:
>
> 10_misc.cf                     25_textcat.cf 70_sare_uri1.cf
> 20_advance_fee.cf              25_uribl.cf 70_sare_whitelist.cf
> 20_anti_ratware.cf             30_text_de.cf 70_sc_top200.cf
> 20_body_tests.cf               30_text_fr.cf 72_sare_bml_post25x.cf
> 20_compensate.cf               30_text_it.cf 72_sare_redirect_post3.0.0.cf
> 20_dnsbl_tests.cf              30_text_nl.cf 88_FVGT_body.cf
> 20_drugs.cf                    30_text_pl.cf 88_FVGT_headers.cf
> 20_fake_helo_tests.cf          30_text_pt_br.cf 88_FVGT_rawbody.cf
> 20_head_tests.cf               50_scores.cf 88_FVGT_subject.cf
> 20_html_tests.cf               60_awl.cf 88_FVGT_uri.cf
> 20_meta_tests.cf               60_whitelist.cf 99_FVGT_Tripwire.cf
> 20_net_tests.cf                60_whitelist_spf.cf
> 99_sare_fraud_post25x.cf
> 20_phrases.cf                  60_whitelist_subject.cf        RulesDuJour
> 20_porn.cf                     70_sare_adult.cf               antidrug.cf
> 20_ratware.cf                  70_sare_bayes_poison_nxm.cf    backhair.cf
> 20_uri_tests.cf                70_sare_evilnum0.cf blacklist-uri.cf
> 23_bayes.cf                    70_sare_evilnum1.cf bogus-virus-warnings.cf
> 25_accessdb.cf                 70_sare_evilnum2.cf chickenpox.cf
> 25_antivirus.cf                70_sare_genlsubj.cf            languages
> 25_body_tests_es.cf            70_sare_header.cf              mangled.cf
> 25_body_tests_pl.cf            70_sare_html.cf                random.cf
> 25_dcc.cf                      70_sare_obfu.cf                rules.121205
> 25_domainkeys.cf               70_sare_oem.cf                 sober_p.cf
> 25_hashcash.cf                 70_sare_random.cf              triplets.txt
> 25_pyzor.cf                    70_sare_specific.cf            tripwire.cf
> 25_razor2.cf                   70_sare_spoof.cf               weeds_2.cf
> 25_replace.cf                  70_sare_unsub.cf
> 25_spf.cf                      70_sare_uri0.cf
>
>

Are these rules in your local config directory /etc/mail/spamassassin or are they in the distributed SA rules directory /usr/local/share/spamassassin in either case you should clean up the directories. Don't mix the distributed SA rules with SARE/Local rules. You also have some duplicate rules in there that should be cleaned up.

Andy