> Hi Jari,
> This is impressive! I am impressed by the high score it
> got from your machine's analysis. I think this is what I
> am looking for.
> The lowest score among the rule is 0.9, it is well way of
> my 0.1 total score. I think I really missed out quite a
> few things. May I know where I can alter the ruleset? Do
> I require additional plugins ? I am using the defaults
> plugins set from Qmail-toaster cnt50 .
>
Well... I use the following rulesets in my sa-update channelfile:
---------------------(/etc/spamassassin/channels.txt)-------------------
updates.spamassassin.org
sought.rules.yerp.org
saupdates.openprotect.com
72_sare_redirect_post3.0.0.cf.sare.sa-update.dostech.net
70_sare_evilnum0.cf.sare.sa-update.dostech.net
70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net
70_sare_html0.cf.sare.sa-update.dostech.net
70_sare_html_eng.cf.sare.sa-update.dostech.net
70_sare_header0.cf.sare.sa-update.dostech.net
70_sare_header_eng.cf.sare.sa-update.dostech.net
70_sare_specific.cf.sare.sa-update.dostech.net
70_sare_adult.cf.sare.sa-update.dostech.net
72_sare_bml_post25x.cf.sare.sa-update.dostech.net
99_sare_fraud_post25x.cf.sare.sa-update.dostech.net
70_sare_spoof.cf.sare.sa-update.dostech.net
70_sare_random.cf.sare.sa-update.dostech.net
70_sare_oem.cf.sare.sa-update.dostech.net
70_sare_genlsubj0.cf.sare.sa-update.dostech.net
70_sare_genlsubj_eng.cf.sare.sa-update.dostech.net
70_sare_unsub.cf.sare.sa-update.dostech.net
70_sare_uri0.cf.sare.sa-update.dostech.net
70_sare_obfu0.cf.sare.sa-update.dostech.net
70_sare_stocks.cf.sare.sa-update.dostech.net
-----------------------------------------------------------------------
---------------------(/etc/cron.hourly/sa-update)----------------------
#!/bin/sh
/usr/local/bin/sa-update --allowplugins --channelfile
/etc/spamassassin/channels.txt --nogpg && \
/usr/local/bin/sa-compile && \
/etc/init.d/spamassassin reload
exit 0
-----------------------------------------------------------------------
In addition to those, I use Botnet -plugin. I don't remember url to get it, but
surely someone knows, maybe even google;)
Cheers
jarif
