Dear Sirs, I appreciate your help.
I made some modifications and additions to the configuration of SA 1. Modify required_score from 3.5 to 5.0 2. Add RBL 3. Add SARE rules 72_sare_redirect_post3.0.0.cf.sare.sa-update.dostech.net 70_sare_evilnum0.cf.sare.sa-update.dostech.net 70_sare_evilnum1.cf.sare.sa-update.dostech.net 70_sare_evilnum2.cf.sare.sa-update.dostech.net 70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net 70_sare_html.cf.sare.sa-update.dostech.net 70_sare_header.cf.sa-update.dostech.net 70_sare_specific.cf.sare.sa-update.dostech.net 70_sare_adult.cf.sare.sa-update.dostech.net 72_sare_bml_post25x.cf.sa-update.dostech.net 99_sare_fraud_post25x.cf.sare.sa-update.dostech.net 70_sare_spoof.cf.sare.sa-update.dostech.net 70_sare_random.cf.sare.sa-update.dostech.net 70_sc_top200.cf.sare.sa-update.dostech.net 70_sare_oem.cf.sare.sa-update.dostech.net 70_sare_genlsubj.cf.sare.sa-update.dostech.net 70_sare_genlsubj_x30.cf.sare.sa-update.dostech.net 70_sare_genlsubj_eng.cf.sare.sa-update.dostech.net 70_sare_genlsubj_arc.cf.sare.sa-update.dostech.net 70_sare_highrisk.cf.sare.sa-update.dostech.net 70_sare_unsub.cf.sare.sa-update.dostech.net 70_sare_whitelist.cf.sare.sa-update.dostech.net 70_sare_obfu.cf.sare.sa-update.dostech.net 70_sare_stocks.cf.sare.sa-update.dostech.net 4. Add rules SOUGHT 4. Add zen.spamhaug.org in MTA And these are the statistics from yesterday: Total messages: Ham: Spam: % Spam: ---------------------------------------------------------------------- 10082 5395 4687 46.49% Average spam score : 41.67/5.00 Average ham score : -0.25/5.00 Compared to the statistics before yesterday: Total messages: Ham: Spam: % Spam: ---------------------------------------------------------------------- 11656 5225 6431 55.17% Average spam score : 38.55/4.02 Average ham score : -0.69/4.22 The amount of emails decreased approximately by 1000 (I imagine it will be by RBL in MTA) But the percentage of spam also decreased, this concerns me because some of the comments from the list indicated that this percentage is much higher than HAM As might improve my antispam system? Thanks Jose Luis > Date: Wed, 23 Sep 2009 09:18:34 +0200 > From: uh...@fantomas.sk > To: users@spamassassin.apache.org > Subject: Re: Problems with high spam > > On 22.09.09 15:02, Jose Luis Marin Perez wrote: > > Thank you for your answers > > > > Qmail-Smtpd have the following RBL configured: > > > > bl.spamcop.net > > cbl.abuseat.org > > combined.njabl.org > > combined.njabl.org used to include dynablock.njabl.org which was imported > spamhaus PBL. Now it's equal to using dnsbl.njabl.org - dynamic addresses > aren't there anymore. The cbl.abuseat.org is imported to Spamhaus XBL. > Both PBL and XBL are included in zen.spamhaus.org so I recommend using > zen.spamhaus.org if you can fullfil their requirements. > > We found bl.spamcop.net reliable, however spamcop recommends using it for > temporarily blocking (4xx return codes). > > Also, I recomment using blacklists in SA, they are also checked in headers > SMTPD does not check. > > > These are the SARE rules which adds to SA: > > oh, many of them may be obsolete and cause false positives. I'd be careful > since SARE claims those rules are not being updated anymore. > > > echo "70_sare_uri0.cf.sare.sa-update.dostech.net" >> > > /etc/mail/spamassassin/sare-sa-update-channels.txt > > echo "70_sare_uri1.cf.sare.sa-update.dostech.net" >> > > /etc/mail/spamassassin/sare-sa-update-channels.txt > > echo "70_sare_uri3.cf.sare.sa-update.dostech.net" >> > > /etc/mail/spamassassin/sare-sa-update-channels.txt > > Especially these were replaced by URIBL, turn them off and urn on uribl by > uncommenting line > > loadplugin Mail::SpamAssassin::Plugin::URIDNSBL > > in init.pre. > > -- > Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. > "Where do you want to go to die?" [Microsoft] _________________________________________________________________ Connect to the next generation of MSN Messenger http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline
