QotD: SpamAssassin Rating
Posted November 3rd, 2006 @ 10:45am by Erik J. Barzeski
Question: At what level do you have SpamAssassin set?
My Answer: The new server at MediaTemple offers SpamAssassin. On the advice of a friend, I set my limit to 5 and only modify the subject currently. It worked reasonably well after a few days of testing, so I changed my parents' email accounts to delete at 5 or higher. Then I lowered my threshhold to 3. I got two false positives, one of which was actually a notification of a comment spam, but a lot more correctly marked spam. I've dropped back to 4 now (the two false positive threes were 3.1 and 3.7). 4 seems to be marking about half of my spam without any (yet) false positives.
I think I can tweak some of SpamAssassin's settings beyond "total score" and "action," but I've not yet gotten into that. I'm just trying to settle on a number at which I can change "modify subject" to "delete." KISS and all that. Somewhere between 4 and 5 seems to be a good spot.
You are encouraged to answer the Question of the Day for yourself in the comments or on your blog.
Posted 03 Nov 2006 at 11:23am #
I had two levels: 5 for moving to Junk, 10 for /dev/null. Though this was after I'd trained it a lot (using the bayesian stuff). I then (really) upped the weightings of the 60%+ certainties, such that if something scored 99% bayesian certainty it was instantly going to /dev/null.
(Before setting 10 to /dev/null I had it going to a separate "Really Junk" folder for about a month with 0 false positives.)
With that setup I had maybe 1 or 2 spam reach my inbox every 3-4 days, around 5-10 actual spam in the Junk, and maybe 1 false positive end up in the Junk folder (which was then really easy to spot, and most of the time that was actually Mail that decided - wrongly - it was spam). According to my stats ~140 day were ending up in /dev/null.
Posted 05 Nov 2006 at 10:16am #
Do they also offer SPF or Domainkeys ? Because I do believe that both of these solution should be implemented where they can. SPf is on my plate should implement that in a few weeks.
Posted 08 Nov 2006 at 12:46pm #
My answer to this QotD is in my blog here:
Using a MaybeSpam Mailbox
I put non-list messages with a score of 2 or more in my "MaybeSpam" mailbox and then "greenlist" false positives. I put all my spam-fighting energy into keeping my greenlist up-to-date and so far, it's working well for me. Details are in the blog item.
BTW, nice blog!
Posted 14 Nov 2006 at 4:56pm #
I used the default 5 for junk, and 6 for automatically deleting. I am sick handling all those spam.