Matthias Leisi wrote:
Marcin Krol schrieb:
Is anybody here willing to share other / better techniques and tips?
No silver bullet, only blood, sweat and tears :-)
I agree.
* Create custom rules that to match your uncaught spam (and maybe share
these rules back on this list).
Yes, custom rules are a great way of supplementing SA's scoring. But
score your custom rules low to start with and ALWAYS run 'spamassassin
--lint' to check your custom rules BEFORE restarting SA as if you're
anything like me you will make typos!
* If circumstances permit, make use of extensive whitelisting, so that
you can increase the score of rules (or maybe lower the threshold after
which you consider a message to be spam).
* Experiment with additional blacklists (but beware of false positives).
Yes, additional DNSBLs such as psbl and uceprotect can be integrated into SA
Also look at setting up Bayes and train it well. A well trained Bayes
setup can hit 99% plus spam (for me) and can be highly effective.
My most effective rule classes are Bayes, DNSBLs and URIBLs plus my own
custom rules for stuff SA routinely misses.
Add on 3rd party rules like JM_SOUGHT and SARE can be useful too so
maybe look at those as well.