<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Verdana; font-size: 10pt; color: #000000'><br><hr id="zwchr"><blockquote style="border-left:2px solid rgb(16, 16, 255);margin-left:5px;padding-left:5px;"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div class="WordSection1"><p class="MsoNormal">For ages MailScanner and spamassassin have been doing a fantastic job and we’ve had almost no spam at all. However, recently I’ve noticed a slow but steady increase in spam that seems to be slipping past with a very low score. I’m still using some of the old sare rulesets (rulesets listed below) as they seem to be catching spam although the number these days seems to be dropping off apart from the adult one which is still quite effective. Could these be interfering with the standard rulesets in the version of SA installed (3.2.5 and perl 5.8.8)?</p><p class="MsoNormal"> </p><p class="MsoNormal">Rulesets</p><p class="MsoNormal">70_sare_adult.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">70_sare_header.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">70_sare_obfu.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">70_sare_specific.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">70_sare_unsub.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">70_sare_uri0.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">70_sare_uri1.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">99_FVGT_Tripwire.cf.sare.sa-update.dostech.net</p><p class="MsoNormal">sought.rules.yerp.org</p><p class="MsoNormal"> </p><p class="MsoNormal">We also use spamhaus, spamcop,m barracuda and abuseat blacklists in the MTA. MS is 4.79.11, and I’ve the KAM rulesets and ScamNailer 2.09 and clamav with the sanesecurity addins.</p><p class="MsoNormal"> </p><p class="MsoNormal">Are there any tricks I’m missing on this setup?</p><p class="MsoNormal"> </p><p class="MsoNormal">Jason</p><p class="MsoNormal"> </p><p class="MsoNormal"> </p></div></blockquote>Slap a sample up to pastebin and lets us know what you scored it as. We can then run though our own installations. Remember to include all the headers.<span><br><br>-- <br><span name="x"></span>Thanks, Phil<span name="x"></span><br></span></div></body></html>