Bayesian just about holding back the spam....

[Tom H <to...@limepepper.co.uk>]

Hi chaps,

I guess this comes up a couple of times a day, but in the last few days,
its only been the Bayesian filtering that has stopped a torrent of spam
being delivered to my users.

On the following email, its a blatant oem software spam, but the regular
rules would not have scored it above 5, without bayes.

I am using rules_du_jour to update the rules, with a config that I have
pasted at the bottom of the screen, and it includes the SARE_OEM
ruleset; (A couple of months ago, I a sure a spam like this would have
hit 25 or something on the basic rules....)

Any ideas what I am doing wrong?

Thanks,

Tom H

Content preview:  More than 200 software titles from world leading
  manufacturers a.. MS Windows XP Professional with SP2 - $49.95 b.. Adobe
  Photoshop CS2 V 9.0 - $69.95 c.. Microsoft Office XP Professional -
  $49.95 d.. Adobe Acrobat 5.0 - $39.95 Visit our Website [...]

Content analysis details:   (8.3 points, 5.0 required)

pts rule name              description
---- ----------------------
--------------------------------------------------
0.8 SARE_OEM_PRO_DOL       BODY: SARE_OEM_PRO_DOL
0.0 HTML_MESSAGE           BODY: HTML included in message
3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
0.1 HTML_70_80             BODY: Message is 70% to 80% HTML
1.9 SARE_OEM_POP_PRICES3   SARE_OEM_POP_PRICES3
0.8 SARE_OEM_PRODS_1       SARE_OEM_PRODS_1
0.9 SARE_OEM_PRODS_FEW     SARE_OEM_PRODS_FEW
0.4 SARE_PRODUCTS_02       SARE_PRODUCTS_02










SA_DIR="/etc/mail/spamassassin"
MAIL_ADDRESS="root"
SINGLE_EMAIL_ONLY="true";
SA_RESTART="/etc/init.d/spamassassin restart"
TRUSTED_RULESETS="
        TRIPWIRE
        ANTIDRUG
        SARE_EVILNUMBERS0
        RANDOMVAL
        SARE_ADULT
        SARE_FRAUD
        SARE_BML
        SARE_SPOOF
        SARE_BAYES_POISON_NXM
        SARE_OEM
        SARE_RANDOM
        SARE_OBFU0
        SARE_HTML
        SARE_HEADER
        SARE_STOCKS
        SARE_SPAMCOP_TOP200
        "