Advanced

The 2-Minute Guide to tripling SpamAssassin's effectiveness

Posted by dave on · 6 comments
LXer; By Dave Whitinger
Mail this story
Print this story

This quick tip will take 2 minutes (or less) for you to perform, and will give you astonishingly improved results out of SpamAssassin.

# Change directory to suit.
cd /etc/mail/spamassassin/

wget http://mywebpages.comcast.net/mkettler/sa/antidrug.cf
wget http://www.emtinc.net/includes/backhair.cf
wget http://www.emtinc.net/includes/chickenpox.cf
wget http://www.rulesemporium.com/rules/99_FVGT_Tripwire.cf
wget http://www.rulesemporium.com/rules/bigevil.cf
wget http://www.rulesemporium.com/rules/evilnumbers.cf
wget http://www.stearns.org/sa-blacklist/random.current.cf
wget http://www.stearns.org/sa-blacklist/sa-blacklist.current
wget http://www.stearns.org/sa-blacklist/sa-blacklist.current.uri...
wget http://www.timj.co.uk/linux/bogus-virus-warnings.cf

# Restart spamd. Fedora Core does it like this:
/etc/rc.d/init.d/spamassassin restart

# Enjoy!

More custom rulesets are available at this link. You don't have to edit any files, because the ruleset's existence in the spamassassin directory will cause it to be read and used by spamd. Cool!

  Nav
» Read more about: Story Type: Tutorial

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (6)

Sweet. But it only took 43 seconds

Thanks for the tip.
dave Story submitter ·
Happy to help! :)

dave

use SURBL instead

According to discussion on the SA mail list that indicates SURBL is a better solution than custom rules (in particular bigevil.cf). Check out http://www.surbl.org.

Rules Du Jour

Even easier is to setup the Rules Du Jour script in your /etc/cron.daily/ and have the new rules downloaded every day if there are changes it even mails you a nice little summary when done.

http://www.exit0.us/index.php/RulesDuJour

bigevil.cf and sa-blacklist are deprecated, use ws.surbl.org

The SpamAssassin rulesets bigevil.cf and sa-blacklist have essentially merged and have since become very large. They are so large now that on machines with moderate memory, bigevil in particular can now crash SpamAssassin due to running out of memory.

The authors of those rules recommend using SURBLs instead, in particular ws.surbl.org, which contains all of the same domains as bigevil.cf, sa-blacklist and some other lists, in SURBL form. ws.surbl.org runs with a much smaller memory footprint and also uses less CPU since all that's needed is a simple RBL-style DNS lookup instead of running through tens of thousands of regular expressions for every incoming message.

Other SURBL lists, all highly effective against spam since they list the domains from spam message body URIs, are described at: http://www.surbl.org/

This message was edited Jul 25, 2004 3:35 PM This message was edited Jul 25, 2004 3:46 PM
dave Story submitter ·
Excellent information; thank you Jeff! I'll be updating my own system with this information.

best, dave

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post