Spam starting to slip in...

[Jason Ede]

For ages MailScanner and spamassassin have been doing a fantastic job and we've had almost no spam at all. However, recently I've noticed a slow but steady increase in spam that seems to be slipping past with a very low score. I'm still using some of the old sare rulesets (rulesets listed below) as they seem to be catching spam although the number these days seems to be dropping off apart from the adult one which is still quite effective. Could these be interfering with the standard rulesets in the version of SA installed (3.2.5 and perl 5.8.8)?

Rulesets
70_sare_adult.cf.sare.sa-update.dostech.net
70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net
70_sare_header.cf.sare.sa-update.dostech.net
70_sare_obfu.cf.sare.sa-update.dostech.net
70_sare_specific.cf.sare.sa-update.dostech.net
70_sare_unsub.cf.sare.sa-update.dostech.net
70_sare_uri0.cf.sare.sa-update.dostech.net
70_sare_uri1.cf.sare.sa-update.dostech.net
99_FVGT_Tripwire.cf.sare.sa-update.dostech.net
sought.rules.yerp.org

We also use spamhaus, spamcop,m barracuda and abuseat blacklists in the MTA. MS is 4.79.11, and I've the KAM rulesets and ScamNailer 2.09 and clamav with the sanesecurity addins.

Are there any tricks I'm missing on this setup?

Jason


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20101103/7f593b13/attachment.html