You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Matt <ma...@gmail.com> on 2014/03/10 23:40:13 UTC

Improving Results

I am running Spamassassin 3.003002 and sa-update -D indicates I have
these modules installed.

module installed: Digest::SHA1, version 2.12
module installed: HTML::Parser, version 3.64
module installed: Net::DNS, version 0.65
module installed: NetAddr::IP, version 4.027
module installed: Time::HiRes, version 1.9721
module installed: Archive::Tar, version 1.58
module installed: IO::Zlib, version 1.09
module installed: Digest::SHA1, version 2.12
module installed: MIME::Base64, version 3.08
module installed: DB_File, version 1.82
module installed: Net::SMTP, version 2.31
module installed: Mail::SPF, version v2.008
module installed: IP::Country::Fast, version 604.001
module installed: Razor2::Client::Agent, version 2.84
module installed: Net::Ident, version 1.23
module installed: IO::Socket::INET6, version 2.56
module installed: IO::Socket::SSL, version 1.31
module installed: Compress::Zlib, version 2.021
module installed: Mail::DKIM, version 0.37
module installed: DBI, version 1.609
module installed: Getopt::Long, version 2.38
module installed: LWP::UserAgent, version 5.833
module installed: HTTP::Date, version 5.831
module installed: Encode::Detect, version 1.01

I also have greylisting and Clamav running.  Is there anything else I
can add to decrease the spam that gets through?  I still have some
phishing, spam delivery notices and spam funeral notices that get
through.  It catches most everything but enough still gets through to
be annoying.

Re: Improving Results

Posted by Bowie Bailey <Bo...@BUC.com>.
On 3/10/2014 10:40 PM, Amish wrote:
>
> > From: Matt <ma...@gmail.com>
> > To: users@spamassassin.apache.org
>
> > I am running Spamassassin 3.003002 and sa-update -D indicates I have
> > these modules installed.
>
> > module installed: Digest::SHA1, version 2.12
> ...
> >module installed: Encode::Detect, version 1.01
>
> > I also have greylisting and Clamav running.  Is there anything else I
> > can add to decrease the spam that gets through?
>
> First, you may want to switch to 3.4 to use new features
>
> Try sought rulesets.
> https://wiki.apache.org/spamassassin/SoughtRules
>
> Try virus bounce ruleset
> http://wiki.apache.org/spamassassin/VBounceRuleset
>
> Also may be try DCC as well.

Somewhat off-topic, but you could also add the Sanesecurity signatures 
to ClamAV.  They will catch quite a bit of phishing emails, spam, 
malware, etc.  My ClamAV installation gets many more hits from these 
signatures than from the official ones.

Signature descriptions:
http://sanesecurity.com/usage/signatures/

Scripts to keep the sigs up to date:
http://sanesecurity.com/usage/linux-scripts/

Watch your memory usage.  As with SA, adding a bunch of new signatures 
can significantly increase the memory footprint.

-- 
Bowie

Re: Improving Results

Posted by Amish <am...@yahoo.com>.

> From: Matt <ma...@gmail.com>
> To: users@spamassassin.apache.org 

> I am running Spamassassin 3.003002 and sa-update -D indicates I have
> these modules installed.

> module installed: Digest::SHA1, version 2.12
...
>module installed: Encode::Detect, version 1.01

> I also have greylisting and Clamav running.  Is there anything else I
> can add to decrease the spam that gets through?

First, you may want to switch to 3.4 to use new features

Try sought rulesets.
https://wiki.apache.org/spamassassin/SoughtRules

Try virus bounce ruleset

http://wiki.apache.org/spamassassin/VBounceRuleset

Also may be try DCC as well.

Amm

Re: Improving Results

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 3/10/2014 6:40 PM, Matt wrote:
> I am running Spamassassin 3.003002 and sa-update -D indicates I have
> these modules installed.
>
> module installed: Digest::SHA1, version 2.12
> module installed: HTML::Parser, version 3.64
> module installed: Net::DNS, version 0.65
> module installed: NetAddr::IP, version 4.027
> module installed: Time::HiRes, version 1.9721
> module installed: Archive::Tar, version 1.58
> module installed: IO::Zlib, version 1.09
> module installed: Digest::SHA1, version 2.12
> module installed: MIME::Base64, version 3.08
> module installed: DB_File, version 1.82
> module installed: Net::SMTP, version 2.31
> module installed: Mail::SPF, version v2.008
> module installed: IP::Country::Fast, version 604.001
> module installed: Razor2::Client::Agent, version 2.84
> module installed: Net::Ident, version 1.23
> module installed: IO::Socket::INET6, version 2.56
> module installed: IO::Socket::SSL, version 1.31
> module installed: Compress::Zlib, version 2.021
> module installed: Mail::DKIM, version 0.37
> module installed: DBI, version 1.609
> module installed: Getopt::Long, version 2.38
> module installed: LWP::UserAgent, version 5.833
> module installed: HTTP::Date, version 5.831
> module installed: Encode::Detect, version 1.01
>
> I also have greylisting and Clamav running.  Is there anything else I
> can add to decrease the spam that gets through?  I still have some
> phishing, spam delivery notices and spam funeral notices that get
> through.  It catches most everything but enough still gets through to
> be annoying.
recommendations:

   Upgrade to 3.4.0

   You might use the KAM.cf I write: 
http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf

regards,
KAM