On 09/12/2016 11:50 AM, Jesse Norell wrote: > On Mon, 2016-09-12 at 11:40 -0500, thomas cameron wrote: >> Any other tips welcome! > > You didn't mention any details of your setup, but some very basic tips > are to run a current version of spamassassin and run sa-update > regularly. You might verify (or confirm) the user you train bayes with > is the same user that the scanner runs as.
Fair point, sorry. I'm running RHEL 7, using spamassassin-3.4.0-2.el7.x86_64 The only real changes I've made are in local.cf: [root@mail-west ~]# cat /etc/mail/spamassassin/local.cf # These values can be overridden by editing ~/.spamassassin/user_prefs.cf # (see spamassassin(1) for details) # These should be safe assumptions and allow for simple visual sifting # without risking lost emails. required_hits 5 report_safe 0 rewrite_header Subject ***SPAM(_SCORE_)*** use_bayes 1 bayes_auto_learn 1 bayes_ignore_header X-Bogosity bayes_ignore_header X-Spam-Flag bayes_ignore_header X-Spam-Status # per http://www.spamtips.org/2011/02/smfbracketsto-rule.html header SMF_BRACKETS_TO To:raw =~ /<<[^<>]+>>/ describe SMF_BRACKETS_TO Double-brackets around To header address score SMF_BRACKETS_TO 1.5 # per http://www.spamtips.org/2011/01/disable-dnsfromahblrhsbl.html score DNS_FROM_AHBL_RHSBL 0 # per http://www.spamtips.org/2011/01/disable-rfc-ignorantorg-rules.html # Add these lines to your local.cf then restart your spamd score __RFC_IGNORANT_ENVFROM 0 score DNS_FROM_RFC_DSN 0 score DNS_FROM_RFC_BOGUSMX 0 score __DNS_FROM_RFC_POST 0 score __DNS_FROM_RFC_ABUSE 0 score __DNS_FROM_RFC_WHOIS 0 Other than that, it's bone stock.
