Pitmaster wrote:
> Hi there,
> I am a total newbie. Have SA installed and done nothing sinds.
> SA is working and catches +- 5% of the spam. How can I simply help SA
> to catch more and keep the speed up?
1) Get the latest version of SA
2) Run sa-update to get the latest rules
3) Enable the network tests
- Make sure the Perl module Net::DNS is up to date.
- Make sure spamd is not being run with the -L option.
4) Fix your trusted_networks configuration in local.cf.
- See the wiki entry at:
http://wiki.apache.org/spamassassin/TrustPath
5) Enable Razor2 and DCC
- Download and install the programs:
http://razor.sourceforge.net
http://www.rhyolite.com/anti-spam/dcc/
- Uncomment the plugin lines in v310.pre
6) Install some add-on rules from SARE
http://www.rulesemporium.com/rules.htm
The network tests will catch more spam that any other single thing you
can do with SA. They take advantage of online blacklists to increase
the score of mail which has passed through a known spam relay, or
which includes a known spam URL in the text.
The trusted_networks setting allows SA to determine which headers in
the message came from your network (or at least networks that you
trust not to falsify their received headers).
Razor2 tries to determine if this message has been classified as spam
by others on the net. DCC simply looks for messages that have been
distributed to lots of people.
The SARE rules are extra rules that have been developed to help with
certain types of spam. Just read through the descriptions and see
which ones you think would be helpful. SARE_STOCKS is probably the
most useful for me at the moment.
Speed is generally a balancing act between the size of the spamd
processes and the available RAM. The more rules and add-ons you use,
the bigger each spamd process will be and the fewer of them you can
run. If you notice your server getting VERY slow, chances are you
have too many spamd children and you should reduce the -m setting for
spamd.
--
Bowie
