Re: Another missed spam question

2005-01-21 Thread Thomas Arend
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Am Freitag, 21. Januar 2005 14:30 schrieb John Fleming:
> Since upgrading v2.64 to 3.0.2, I have a much higher false negative rate. 
> I posted one a couple of days ago that involved a "trusted" issue.  I just
> got a medication-spam this morning that ONLY triggered bayes_99, although
> it mentioned sexual health, anxiety and others I would've thought would've
> triggered more rules.

Another case for my magic eye. Maybe I will find it some day.

Some times they come trough. Spamer react on filters. 

Do you use network tests? Spamer changed the servers frequently. 

>
> Is a lot of reconfiguration usually necessary when upgrading 2.64 to 3.0? 
> I thought I understood that 3.0 incorporated several of the rulesets that
> were previously separate, and besides, I haven't removed any old rulesets
> yet anyway.

I have upgraded three server fom 2.63 to 3.0.x. Normaly there are only small 
changes in the configuration for now unsupported options.

The ammount of reconfiguration depneds on your installation.

>
> Any comments?  Tnx!

Keep your body informed. Garbage in - garbage out.


Thomas
- -- 
icq:133073900
http://www.t-arend.de
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFB8RCFHe2ZLU3NgHsRAp4IAJ9Ssms7Cj357sCmsrDDCOL9Ac93DgCdFapR
VKhrq4CNSbQIFCc13e9PVFU=
=JnPW
-END PGP SIGNATURE-


Re: Another missed spam question

2005-01-21 Thread Loren Wilton
> Is a lot of reconfiguration usually necessary when upgrading 2.64 to 3.0?
I
> thought I understood that 3.0 incorporated several of the rulesets that
were
> previously separate, and besides, I haven't removed any old rulesets yet
> anyway.

Some is necessary.  Shouldn't be a huge amount.

You need to muck with the assorted local.cf options that have changed name
and/or shape.
If you have a NATed host, you need to set up trusted networks.  (You should
have had it before, but  it is important now.)
You need to make sure that all of the spare Perl parts are the appropriate
versions.

And if you are running SARE rules, you will need to fiddle around a little
bit and make sure that you have a rule collection that is appropriate for
3.0+.

Of course you should run lint to make sure things are really working, and
probably also run spamassassin -D to make sure that all of your rule files
are getting picked up.

Loren