Scores problems

[Juan Machado <ju...@itos.uga.edu>]

Hello,
 
I've been using Spamassasin for years now and it seems to be that
something happened after my last OS update.
 
OS: RH 4
Spamassasin ver 3.0.4
Invoking via Amavis-new
 
3 weeks ago when we did an OS and SA update, our users started getting
50-100 spam messages a day (we're dropping any message with a hits>6.5)
... they used to get 1 or 0 a day.
 
We decided to go back to the previous version of SA to see if that fixes
the problem ... no luck.
After testing different things, I decided to increase the timeouts of
SA, Razor and Phyzor to 60. After that, it normalized a little bit to 2
to 8 non-detected spam messages per user.
 
My question is about user_prefs file.
 
We're getting a lot of PORN messages that are not being caught by SA.
The header of these messages looks like:
 
X-Virus-Scanned: amavisd-new at itos.uga.edu
X-Spam-Status: No, hits=4.329 tagged_above=-999 required=6
tests=SARE_URI_NO_THANKS, URIBL_SBL
X-Spam-Level: ****

My question is : Should this header show more tests ? Like the one for
the PORN stuff ? The message is question should be caught by SA, NO WAY
is going to pass a good SA installation (I won't send the message to the
list .. it is really nasty)
 
Under /usr/share/spamassassin, I have the following files:
 
10_misc.cf             20_html_tests.cf     25_hashcash.cf
60_whitelist.cf
20_anti_ratware.cf     20_meta_tests.cf     25_spf.cf       languages
20_body_tests.cf       20_phrases.cf        25_uribl.cf     triplets.txt
20_compensate.cf       20_porn.cf           30_text_de.cf   user_prefs
20_dnsbl_tests.cf      20_ratware.cf        30_text_fr.cf
user_prefs.template
20_drugs.cf            20_uri_tests.cf      30_text_nl.cf
20_fake_helo_tests.cf  23_bayes.cf          30_text_pl.cf
20_head_tests.cf       25_body_tests_es.cf  50_scores.cf

user_prefs file doesn't have anything like the one I found at
http://spamassassin.apache.org/tests_3_0_x.html
 
Any idea ?
 
Thank a lot for your help.
 
 
 
Juan Machado
Manager, Technology Solutions Division
ITOS - Carl Vinson Institute of Government
The University of Georgia