![]() ![]() It's best if you have a corpus of spam and non-spam which can be searched to determine the frequency with which various rules hit. Look in the headers to find those rules that can have their scores decreased. ![]() ![]() Examine non-spam that was wrongly flagged as spam.Those are the rules that can have their scores increased. Look in the headers, and see what rules hit for this email. Examine spam that did not get properly flagged.To determine which scores should be modified for your system, Medical organizations and users will need to score medical and drug-related rules lower than the general population, while mortgage brokers will need to lower the scores of mortgage and debt-related rules. Non-spam has different attributes for different people.You've modified the required hits parameter (up or down), and therefore need to modify at least some of the default scores to properly flag your spam.There are two basic reasons why you might want to change the default scores of the distribution rule set: The primary SA documentation at defines the required_hits parameter, and states,ĥ.0 is the default setting, and is quite aggressive it would be suitable for a single-user setup, but if you're an ISP installing SpamAssassin, you should probably set the default to be more conservative, like 8.0 or 10.0. If the resulting score is high enough (equal or greater than the Required Hits parameter), the email is declared to be spam. Emails are tested to see which rules apply, and the scores of those rules that do apply to the email are added together. SpamAssassin is distributed with rules designed to differentiate between spam and ham. ![]()
0 Comments
Leave a Reply. |