Mailing list messages scoring high!

[Martin Hepworth]

Michael

i'd add in more rules (www.rulesemporium.org) and www.surbl.org for a
nice plugin are good places to start.

you need to increase to score of the spams, not reduce the hit scores..

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Michael Freeman wrote:
> I have the following based on the junk we are getting
>
> # This replaces the SpamAssassin configuration value 'required_hits'.
> # If a message achieves a SpamAssassin score higher than this value,
> # it is spam. See also the High SpamAssassin Score configuration option.
> # This can also be the filename of a ruleset, so the SpamAssassin
> # required_hits value can be set to different values for different messages.
> Required SpamAssassin Score = 3
>
> # If a message achieves a SpamAssassin score higher than this value,
> # then the "High Scoring Spam Actions" are used. You may want to use
> # this to deliver moderate scores, while deleting very high scoring
> messsages.
> # This can also be the filename of a ruleset.
> High SpamAssassin Score = 5
>
> All anything over 5 gets deleted.
> ----- Original Message -----
> From: "Matt Kettler" <mkettler at EVI-INC.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Thursday, May 13, 2004 12:06 PM
> Subject: Re: Mailing list messages scoring high!
>
>
>
>>At 11:50 PM 5/13/2004, Michael Freeman wrote:
>>
>>>Its interesting to note that msgs coming to me from the MailScanner
>>>mailing list should be scoring so high.
>>>
>>>May 13 08:42:02 srv07 MailScanner[19563]: Message 1BOILR-0007TA-8k from
>>>130.246.192.55
>>
>>(<mailto:owner-mailscanner at jiscmail.ac.uk>owner-mailscanner at jiscmail.ac.uk)
>>
>>> to mydomain.com is spam, SpamAssassin (score=3.547, required 3, BIZ_TLD
>>>0.78, DATE_IN_FUTURE_12_24 1.95, HTML_30_40 0.81, HTML_MESSAGE 0.00)
>>
>>
>>Wait.. you consider 3.5 to be high??? And this on a mailing list that is
>>all about spam filtering, where spam will be discussed, and often quoted?
>>
>>You do realize that according to STATISTICS.txt a theshold of 3.0 on SA
>>2.63 results in a false positive rate that hits 2.6% of the nonspam
>
> corpus.
>
>>(Yes, there IS a reason why the default is 5.0)
>>
>>
>>>What wrong with the DATE_IN_FUTURE_12_24 1.95?
>>
>>What do you mean what's wrong with it?
>>
>>-------------------------- MailScanner list ----------------------
>>To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
>>Before posting, please see the Most Asked Questions at
>>http://www.mailscanner.biz/maq/     and the archives at
>>http://www.jiscmail.ac.uk/lists/mailscanner.html
>>
>>
>
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html