Sébastien AVELINE wrote:
Hello,
You will find my top rules fired with spamassassin.
I have spamassassin on several boxes, each have his own bayes_db
files, I use razor, dcc_check, uribl, bayes .... We have hundreds of
thousand messages per day.
In my top rules for spam you will see a lot of "collaborative rules"
like razor,uribl,dcc_check. I wonder why there isn't more heuristic
and bayesian rules in my top. Do you think that my stats seem to be
"normal" or is there something wrong ? Any suggestions are welcome.
It's really absurd that RDNS_NONE is firing off on 99.6% of email.
Do you not have RDNS for your own network, or is it generating invalid
Recieved: headers?
Ahh, yeah, it looks like your own network lacks RDNS:
Received: from unknown (HELO ?192.168.0.213?)
([EMAIL PROTECTED]@82.235.12.159) by smtpp.alinto.net with SMTP; Thu,
24 Jan 2008 09:30:20 +0000
If you've got a local nameserver, you might want to generate an
in-addr.arpa zone for the 192.168.0.* network to fix that.
As for the bayes, that doesn't surprise me. There's 10 different bayes
rules, and while I'd expect that collectively they add up to most of
your mail, it's not surprising that they're not individually scoring
high. It's a little surprising BAYES_50 is doing so well compared to
BAYES_99.. with the chi-squared combining I'd expect BAYES_99 to edge it
out slightly. Are you doing any manual training? what's your "sa-learn
--dump magic" look like?
