I'd look at upgrading to 3.3.1 of SA and of course make sure you run SA-update regularly.<br clear="all">-- <br>Martin Hepworth<br>Oxford, UK<br>
<br><br><div class="gmail_quote">On 3 November 2010 08:15, Jason Ede <span dir="ltr"><<a href="mailto:J.Ede@birchenallhowden.co.uk">J.Ede@birchenallhowden.co.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div link="blue" vlink="purple" lang="EN-GB"><div><p class="MsoNormal">For ages MailScanner and spamassassin have been doing a fantastic job and we’ve had almost no spam at all. However, recently I’ve noticed a slow but steady increase in spam that seems to be slipping past with a very low score. I’m still using some of the old sare rulesets (rulesets listed below) as they seem to be catching spam although the number these days seems to be dropping off apart from the adult one which is still quite effective. Could these be interfering with the standard rulesets in the version of SA installed (3.2.5 and perl 5.8.8)?</p>
<p class="MsoNormal"> </p><p class="MsoNormal">Rulesets</p><p class="MsoNormal"><a href="http://70_sare_adult.cf.sare.sa-update.dostech.net" target="_blank">70_sare_adult.cf.sare.sa-update.dostech.net</a></p><p class="MsoNormal">
<a href="http://70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net" target="_blank">70_sare_bayes_poison_nxm.cf.sare.sa-update.dostech.net</a></p><p class="MsoNormal"><a href="http://70_sare_header.cf.sare.sa-update.dostech.net" target="_blank">70_sare_header.cf.sare.sa-update.dostech.net</a></p>
<p class="MsoNormal"><a href="http://70_sare_obfu.cf.sare.sa-update.dostech.net" target="_blank">70_sare_obfu.cf.sare.sa-update.dostech.net</a></p><p class="MsoNormal"><a href="http://70_sare_specific.cf.sare.sa-update.dostech.net" target="_blank">70_sare_specific.cf.sare.sa-update.dostech.net</a></p>
<p class="MsoNormal"><a href="http://70_sare_unsub.cf.sare.sa-update.dostech.net" target="_blank">70_sare_unsub.cf.sare.sa-update.dostech.net</a></p><p class="MsoNormal"><a href="http://70_sare_uri0.cf.sare.sa-update.dostech.net" target="_blank">70_sare_uri0.cf.sare.sa-update.dostech.net</a></p>
<p class="MsoNormal"><a href="http://70_sare_uri1.cf.sare.sa-update.dostech.net" target="_blank">70_sare_uri1.cf.sare.sa-update.dostech.net</a></p><p class="MsoNormal"><a href="http://99_FVGT_Tripwire.cf.sare.sa-update.dostech.net" target="_blank">99_FVGT_Tripwire.cf.sare.sa-update.dostech.net</a></p>
<p class="MsoNormal"><a href="http://sought.rules.yerp.org" target="_blank">sought.rules.yerp.org</a></p><p class="MsoNormal"> </p><p class="MsoNormal">We also use spamhaus, spamcop,m barracuda and abuseat blacklists in the MTA. MS is 4.79.11, and I’ve the KAM rulesets and ScamNailer 2.09 and clamav with the sanesecurity addins.</p>
<p class="MsoNormal"> </p><p class="MsoNormal">Are there any tricks I’m missing on this setup?</p><p class="MsoNormal"> </p><font color="#888888"><p class="MsoNormal">Jason</p><p class="MsoNormal"> </p><p class="MsoNormal">
</p></font></div></div><br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>