1) Bayes is still in training. I've only recently given everybody the
opportunity to feed it spam. I expect it to get better soon. My question was
more related to why this stuff is getting through now, when it used to get
blocked.
2) I'll look into upgrading. I installed the current version using yum, and a
check-update on spamassassin gives me an enormous list of dependencies which
scares me a bit, quite frankly.
Regards,
Leigh
Leigh Sharpe
Network Systems Engineer
Pacific Wireless
Ph +61 3 9584 8966
Mob 0408 009 502
email [EMAIL PROTECTED]
web www.pacificwireless.com.au
-----Original Message-----
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 29, 2006 10:55 AM
To: Leigh Sharpe
Cc: users
Subject: Re: Lots of missed spam
Leigh Sharpe wrote:
> Hi All,
> After 6 months or more of perfect operation, I have had heaps of spam
> has been missed over the last few weeks. Running SA with -D option
> shows nothing obvious in the logs.
> A small selection of misses is posted here:
> http://www.pacificwireless.com.au/spam/
>
> Anybody got any ideas why really obvious stuff might be getting
> through? Some of it is stuff which always used to get tagged, but now
> isn't. There's been no changes on the server, except for an increase
> in the number of mail users.
> I also note that quite a lot of it is getting negative sscores.
1) all of this spam is hitting BAYES_00.. you really should check your
bayes training and correct it.
2) You're running a relatively old version of SpamAssassin. Version
3.0.3 has multiple security vulnerabilities.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3351
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1266
http://spamassassin.apache.org/advisories/cve-2006-2447.txt
