What is the best High SpamAssassin Score

Randal, Phil prandal at HEREFORDSHIRE.GOV.UK
Mon Feb 23 10:53:26 GMT 2004


My threshold is 4.75 for low, 10.25 for high, autolearning at 9, with loads
of rules, razor, pyzor, dcc.  Bayes has been well-trained.

A couple of spammers have tried to send us spam in batches of 100+ at a
time, so they've been blacklisted.

I found one (disputable) false positive in that high range in the last 3
months.

We still get a few false negatives, but new rules and Bayes usually catch
them.

Now, if ownly we could persuade our users not to subscriber to spammers'
mailing lists.  You know the ones, special deals and offers lists, nothing
to do with work at all, and indistinguishable from the unsolicited stuff :-(
Grrrrr.

Cheers,

Phil
---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Chris Yuzik
> Sent: 22 February 2004 16:35
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: What is the best High SpamAssassin Score
>
>
> Stuart Clark wrote:
>
> >What is the best High SpamAssassin Score?
> >
> >Without getting complaints from customers
> >
> Stuart,
>
> Unfortunately, the answer is not that simple--the "best" score depends
> on a number of factors. Spamassassin has quite a few options
> and can be
> tweaked like crazy. If you have Bayes running, that can increase the
> score of spam. Also, DCC and Razor are great too. Perhaps even more
> significantly, if you have added any additional rule sets, such as
> BigEvil.cf, you catch more spam and will increase the scores
> of spam as
> well. (get it and others from
> http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm)
. It also
depends on what you're going to do with your high spam--are you just
tagging it and delivering it too? Or, if are you deleting it altogether,
in which case you would want to be a bit more catious.

On my server, I have bayes, Razor, and DCC running along with with a few
custom rulesets. I am also using BigEvil.cf, popcorn.cf, weeds.cf, and a
few others that I cannot remember right now.

My thresholds are 5 points for spam and 15 points for high spam. I
deliver spam as an attachment, but quarantine high spam for a couple of
weeks; the user doesn't receive any notification of high-spam.

Cheers,
Chris



More information about the MailScanner mailing list