Mailing list messages scoring high!

[Michael Freeman]

Ok so ill up it to 5 then and see how that goes. Im already using SURBL or
kindof. Just setting up on one box first to see how that works.

----- Original Message -----
From: "Martin Hepworth" <martinh at SOLID-STATE-LOGIC.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Thursday, May 13, 2004 12:28 PM
Subject: Re: Mailing list messages scoring high!


> Michael
>
> i'd add in more rules (www.rulesemporium.org) and www.surbl.org for a
> nice plugin are good places to start.
>
> you need to increase to score of the spams, not reduce the hit scores..
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Michael Freeman wrote:
> > I have the following based on the junk we are getting
> >
> > # This replaces the SpamAssassin configuration value 'required_hits'.
> > # If a message achieves a SpamAssassin score higher than this value,
> > # it is spam. See also the High SpamAssassin Score configuration option.
> > # This can also be the filename of a ruleset, so the SpamAssassin
> > # required_hits value can be set to different values for different
messages.
> > Required SpamAssassin Score = 3
> >
> > # If a message achieves a SpamAssassin score higher than this value,
> > # then the "High Scoring Spam Actions" are used. You may want to use
> > # this to deliver moderate scores, while deleting very high scoring
> > messsages.
> > # This can also be the filename of a ruleset.
> > High SpamAssassin Score = 5
> >
> > All anything over 5 gets deleted.
> > ----- Original Message -----
> > From: "Matt Kettler" <mkettler at EVI-INC.COM>
> > To: <MAILSCANNER at JISCMAIL.AC.UK>
> > Sent: Thursday, May 13, 2004 12:06 PM
> > Subject: Re: Mailing list messages scoring high!
> >
> >
> >
> >>At 11:50 PM 5/13/2004, Michael Freeman wrote:
> >>
> >>>Its interesting to note that msgs coming to me from the MailScanner
> >>>mailing list should be scoring so high.
> >>>
> >>>May 13 08:42:02 srv07 MailScanner[19563]: Message 1BOILR-0007TA-8k from
> >>>130.246.192.55
> >>
>
>>(<mailto:owner-mailscanner at jiscmail.ac.uk>owner-mailscanner at jiscmail.ac.uk
)
> >>
> >>> to mydomain.com is spam, SpamAssassin (score=3.547, required 3,
BIZ_TLD
> >>>0.78, DATE_IN_FUTURE_12_24 1.95, HTML_30_40 0.81, HTML_MESSAGE 0.00)
> >>
> >>
> >>Wait.. you consider 3.5 to be high??? And this on a mailing list that is
> >>all about spam filtering, where spam will be discussed, and often
quoted?
> >>
> >>You do realize that according to STATISTICS.txt a theshold of 3.0 on SA
> >>2.63 results in a false positive rate that hits 2.6% of the nonspam
> >
> > corpus.
> >
> >>(Yes, there IS a reason why the default is 5.0)
> >>
> >>
> >>>What wrong with the DATE_IN_FUTURE_12_24 1.95?
> >>
> >>What do you mean what's wrong with it?
> >>
> >>-------------------------- MailScanner list ----------------------
> >>To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> >>Before posting, please see the Most Asked Questions at
> >>http://www.mailscanner.biz/maq/     and the archives at
> >>http://www.jiscmail.ac.uk/lists/mailscanner.html
> >>
> >>
> >
> >
> > -------------------------- MailScanner list ----------------------
> > To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> > Before posting, please see the Most Asked Questions at
> > http://www.mailscanner.biz/maq/     and the archives at
> > http://www.jiscmail.ac.uk/lists/mailscanner.html
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
>
>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html