Just as a side note, I recently changed the way SA runs for me. It runs sitewide for all users except me, and I run it locally as myself. That is beside the point but I want to thank others for suggestions.
I run rules_du_jour every night and get SARE rules. Despite that, I receive a lot of "get a job stealing money by means of interbank transactions" types of ads. Are there some rulesets or some such which I could be missing? Here's my global config # This is the right place to customize your installation of SpamAssassin. # # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be # tweaked. # # Only a small subset of options are listed below # ########################################################################### # Add *****SPAM***** to the Subject header of spam e-mails # # rewrite_header Subject *****SPAM***** # Save spam messages as a message/rfc822 MIME attachment instead of # modifying the original message (0: off, 2: use text/plain instead) # # report_safe 1 # Set which networks or hosts are considered 'trusted' by your mail # server (i.e. not spammers) # # trusted_networks 212.17.35. # Set file-locking method (flock is not safe over NFS, but is faster) # # lock_method flock # Set the threshold at which a message is considered spam (default: 5.0) # required_score 3.5 # Use Bayesian classifier (default: 1) # use_bayes 1 # Bayesian classifier auto-learning (default: 1) # bayes_auto_learn 1 # Set headers which may provide inappropriate cues to the Bayesian # classifier # # bayes_ignore_header X-Bogosity # bayes_ignore_header X-Spam-Flag # bayes_ignore_header X-Spam-Status #loadplugin Mail::SpamAssassin::Plugin::RelayCountry add_header all Relay-Country _RELAYCOUNTRY_ whitelist_from [EMAIL PROTECTED] whitelist_from [EMAIL PROTECTED] score FORGED_OUTLOOK_TAGS 6 score FORGED_MUA_THEBAT_BOUN 6 score FORGED_MUA_OUTLOOK 6 score MIME_HTML_ONLY 2 score FUZZY_VLIUM 5 and here's my local config # SpamAssassin user preferences file. See 'perldoc Mail::SpamAssassin::Conf' # for details of what can be tweaked. ########################################################################### # How many points before a mail is considered spam. # required_score 5 # Whitelist and blacklist addresses are now file-glob-style patterns, so # "[EMAIL PROTECTED]", "[EMAIL PROTECTED]", or "*.domain.net" will all work. # whitelist_from [EMAIL PROTECTED] # Add your own customised scores for some tests below. The default scores are # read from the installed spamassassin rules files, but you can override them # here. To see the list of tests and their default scores, go to # http://spamassassin.apache.org/tests.html . # # score SYMBOLIC_TEST_NAME n.nn # Speakers of Asian languages, like Chinese, Japanese and Korean, will almost # definitely want to uncomment the following lines. They will switch off some # rules that detect 8-bit characters, which commonly trigger on mails using CJK # character sets, or that assume a western-style charset is in use. # # score HTML_COMMENT_8BITS 0 # score UPPERCASE_25_50 0 # score UPPERCASE_50_75 0 # score UPPERCASE_75_100 0 # score OBSCURED_EMAIL 0 # Speakers of any language that uses non-English, accented characters may wish # to uncomment the following lines. They turn off rules that fire on # misformatted messages generated by common mail apps in contravention of the # email RFCs. # score SUBJ_ILLEGAL_CHARS 0 use_bayes 1 bayes_auto_learn 1 # Rules header IGOR_PAYPAL_PAYMENT Subject =~ /Notification of an Instant Payment Received/i score IGOR_PAYPAL_PAYMENT -5 describe IGOR_PAYPAL_PAYMENT This is a paypal payment or an answer thereof. header IGOR_WINTERNITZ From =~ /winternitz/ score IGOR_WINTERNITZ -5 describe IGOR_WINTERNITZ This is a winternitz email header IGOR_WORD_PROBLEM_ERROR Subject =~ /word_problem error/ score IGOR_WORD_PROBLEM_ERROR 15 describe IGOR_WORD_PROBLEM_ERROR Algebra.Com Word Problem Error i