<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
        {mso-style-priority:99;
        mso-style-link:"Plain Text Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";
        mso-fareast-language:EN-US;}
span.EmailStyle17
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.PlainTextChar
        {mso-style-name:"Plain Text Char";
        mso-style-priority:99;
        mso-style-link:"Plain Text";
        font-family:"Calibri","sans-serif";}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri","sans-serif";
        mso-fareast-language:EN-US;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>That will doubtless help, but I have similar issues with 3.1.1.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>This bug isn&#8217;t helping:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Mass-check generating nightly rules updates with 0 scores for rules with dependencies:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoPlainText><a href="https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6510">https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6510</a><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Cheers,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Phil<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D'>--</span><span style='color:#1F497D'> <br></span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D'>Phil Randal | Infrastructure Engineer</span><span style='color:#1F497D'> <br></span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#400040'>NHS Herefordshire &amp; Herefordshire Council&nbsp; |</span><span style='color:#1F497D'> </span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D'>Deputy Chief Executive's Office | I.C.T. Services Division</span><span style='color:#1F497D'> <br></span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D'>Thorn Office Centre, Rotherwas, Hereford, HR2 6JT</span><span style='color:#1F497D'> <br></span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D'>Tel: 01432 260160</span><span style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] <b>On Behalf Of </b>Martin Hepworth<br><b>Sent:</b> 05 November 2010 13:29<br><b>To:</b> MailScanner discussion<br><b>Subject:</b> Re: Spam starting to slip in...<o:p></o:p></span></p><p class=MsoNormal><o:p>&nbsp;</o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>I'd look at upgrading to 3.3.1 of SA and of course make sure you run SA-update regularly.<br clear=all>-- <br>Martin Hepworth<br>Oxford, UK<br><br><o:p></o:p></p><div><p class=MsoNormal>On 3 November 2010 08:15, Jason Ede &lt;<a href="mailto:J.Ede@birchenallhowden.co.uk">J.Ede@birchenallhowden.co.uk</a>&gt; wrote:<o:p></o:p></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>For ages MailScanner and spamassassin have been doing a fantastic job and we&#8217;ve had almost no spam at all. However, recently I&#8217;ve noticed a slow but steady increase in spam that seems to be slipping past with a very low score. I&#8217;m still using some of the old sare rulesets (rulesets listed below) as they seem to be catching spam although the number these days seems to be dropping off apart from the adult one which is still quite effective. Could these be interfering with the standard rulesets in the version of SA installed (3.2.5 and perl 5.8.8)?<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>&nbsp;<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Rulesets<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://70_sare_adult.cf.sare.sa-update.dostech.net" target="_blank">70_sare_adult.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net" target="_blank">70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://70_sare_header.cf.sare.sa-update.dostech.net" target="_blank">70_sare_header.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://70_sare_obfu.cf.sare.sa-update.dostech.net" target="_blank">70_sare_obfu.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://70_sare_specific.cf.sare.sa-update.dostech.net" target="_blank">70_sare_specific.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://70_sare_unsub.cf.sare.sa-update.dostech.net" target="_blank">70_sare_unsub.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://70_sare_uri0.cf.sare.sa-update.dostech.net" target="_blank">70_sare_uri0.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://70_sare_uri1.cf.sare.sa-update.dostech.net" target="_blank">70_sare_uri1.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://99_FVGT_Tripwire.cf.sare.sa-update.dostech.net" target="_blank">99_FVGT_Tripwire.cf.sare.sa-update.dostech.net</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://sought.rules.yerp.org" target="_blank">sought.rules.yerp.org</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>&nbsp;<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>We also use spamhaus, spamcop,m barracuda and abuseat blacklists in the MTA. MS is 4.79.11, and I&#8217;ve the KAM rulesets and ScamNailer 2.09 and clamav with the sanesecurity addins.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>&nbsp;<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Are there any tricks I&#8217;m missing on this setup?<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>&nbsp;<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#888888'>Jason<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#888888'>&nbsp;<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#888888'>&nbsp;<o:p></o:p></span></p></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><br>--<br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br>Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br><br>Support MailScanner development - buy the book off the website!<o:p></o:p></p></div><p class=MsoNormal><o:p>&nbsp;</o:p></p></div></body></html>