newbie ? on testing SA

[Tracey Gates <tg...@yoursummit.com>]

I have a new server that I've brought up on SpamAssassin.  I have the
.cf files listed below that I've added to it to catch other spam
messages.  It's catching some spam but not the amount that my old server
had.  
Here is the snippet of my SA's local.cf
	rewrite_subject      0
	report_header        1
	use_terse_report     1
	spam_level_stars     0
	defang_mime          0
	required_hits        3.5

My questions are:
	1.  How do I test that these .cf files are working?
	2.  What other .cf rules are good to add to catch most spam that
I'm missing?
	3.  How do I test a message that got through to me but is spam?
	4.  How do I tell SA that a message is spam?

evilnumbers.cf
70_sare_bayes_poison_nxm.cf
70_sare_html0.cf
70_sare_adult.cf
70_sare_random.cf
chickenpox.cf
weeds.cf
backhair.cf
Tripwire.cf

Thanks!

Tracey Gates
Lead Developer
tgates@yoursummit.com 

This communication is intended only for the recipient(s) named above;
may be confidential and/or legally privileged; and, must be treated as
such in accordance with state and federal laws. If you are not the
intended recipient, you are hereby notified that any use of this
communication, or any of its contents, is prohibited. If you have
received this communication in error, please reply to the sender and
then delete the message from your computer system immediately.

Re: newbie ? on testing SA

[Martin Hepworth <ma...@solid-state-logic.com>]

Tracey

you should be able to see that rules being hit in the report header.

you can test messages by using spamassassin at the command line

spamassassin message

if spamassassin -D message for terse output/

I run alot extra as well, some don't get many hits anymore, but they do 
occassionally and I have enought RAM so...

70_sare_adult.cf                88_FVGT_rawbody.cf
70_sare_bayes_poison_nxm.cf     88_FVGT_subject.cf
70_sare_genlsubj.cf             88_FVGT_uri.cf
70_sare_header.cf               99_FVGT_Tripwire.cf
70_sare_html.cf                 99_FVGT_meta.cf
70_sare_oem.cf                  99_sare_fraud_post25x.cf
70_sare_random.cf
70_sare_specific.cf             backhair.cf
70_sare_spoof.cf                bogus-virus-warnings.cf
70_sare_unsub.cf                chickenpox.cf
70_sare_uri.cf                  evilnumbers.cf
70_sare_uri0.cf
70_sare_uri1.cf
70_sare_uri3.cf                 mangled.cf
70_sare_uri_eng.cf              random.cf
72_sare_bml_post25x.cf
72_sare_redirect_post3.0.0.cf   tripwire.cf
88_FVGT_body.cf                 weeds.cf
88_FVGT_headers.cf

I also haver some local rules for various obsfucated drug words etc from

http://sandgnat.com/cmos/cmos.jsp

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Tracey Gates wrote:
> I have a new server that I've brought up on SpamAssassin.  I have the
> .cf files listed below that I've added to it to catch other spam
> messages.  It's catching some spam but not the amount that my old server
> had.  
> Here is the snippet of my SA's local.cf
> 	rewrite_subject      0
> 	report_header        1
> 	use_terse_report     1
> 	spam_level_stars     0
> 	defang_mime          0
> 	required_hits        3.5
> 
> My questions are:
> 	1.  How do I test that these .cf files are working?
> 	2.  What other .cf rules are good to add to catch most spam that
> I'm missing?
> 	3.  How do I test a message that got through to me but is spam?
> 	4.  How do I tell SA that a message is spam?
> 
> evilnumbers.cf
> 70_sare_bayes_poison_nxm.cf
> 70_sare_html0.cf
> 70_sare_adult.cf
> 70_sare_random.cf
> chickenpox.cf
> weeds.cf
> backhair.cf
> Tripwire.cf
> 
> Thanks!
> 
> Tracey Gates
> Lead Developer
> tgates@yoursummit.com 
> 
> This communication is intended only for the recipient(s) named above;
> may be confidential and/or legally privileged; and, must be treated as
> such in accordance with state and federal laws. If you are not the
> intended recipient, you are hereby notified that any use of this
> communication, or any of its contents, is prohibited. If you have
> received this communication in error, please reply to the sender and
> then delete the message from your computer system immediately.
> 
> 
> 

<br />**********************************************************************
<br />
<br />This email and any files transmitted with it are confidential and
<br />intended solely for the use of the individual or entity to whom they
<br />are addressed. If you have received this email in error please notify
<br />the system manager.
<br />
<br />This footnote confirms that this email message has been swept
<br />for the presence of computer viruses and is believed to be clean.	
<br />
<br />**********************************************************************