On 3 Aug 2004 at 5:31, Harry Putnam wrote: > I've used SA for a year or more, but always have the network type > tests turned off. My setup is at the scale of single user home lan > with maybe 2-3000 messages incoming weekly. > > I wondered if someone in a similar status could report what they see > with the networked tests turned on. I'm not sure what all falls under > that category but maybe someone could elaborate a little about which > are more costly etc.
The network tests will slow things down slightly, but with your current utilization you probably won't even notice. > I'm thinking with my light usage it may be smarter to be using them, > also wondered how much more effective that makes SA. Very much more effective. Lately it seems like the majority of spam we catch is scored primarily on network tests and Bayes. Some tips: o If you implement DCC, make sure to use dccifd. It's much faster. o Enable a local DNS cache on the box running SpamAssassin. o Make use of appropriate directives in your local.cf file for tuning. Set "dns_available yes" so it doesn't have to test for a local nameserver. Make use of appropriate timeout values so that things will still work okay if one of the DNSRBLs goes down. (I use "rbl_timeout 5") Read about "trusted_networks" and configure it appropriately. o SURBL, Razor and DCC are all very useful. I've never had much luck with Pyzor, but YMMV. ---- Nels Lindquist <*> Information Systems Manager Morningstar Air Express Inc.
