Thanks for that.
I ran sa-learn using the amavis user and indeed, I now get much less spam than before. One thing I haven't done though is checked for false-positives on the server... that's just so much hassle (is there an easy way to do it?).
Anyways, for now sa-learn seems to have been very effective. You should try it!
Thanks,
Terence
Hi Terence,
Cool! I'm glad it had such a great effect. As far as checking for false positives, I guess it really depends on how much mail you have to process. My server is currently very low volume, so I set amavisd-new to quarantine the messages to my email account (over smtp).
Then I filter the mail into 'quarantined-spam' and 'quarantined-viruses' folders in my mail client. This way I can see the subject and look at the content if necessary. The thing is, with the spam cutoff level of 12 in amavisd-new, I never once saw a false positive!
Obviously, the 'quarantine-to-email-account' method is not scalable at all. You could set up a script to give you a view of the quarantine. For instance you could generate an email that simply contains a list of message-ids, subjects and senders. This list could only include messages that scored between 6 and 15 or something to further streamline your view.
For something more simple, try using something like amavislogsumm (listed on the amavisd-new website in the contributed software section) to look at the senders and recievers of messages marked as spam as well as all kinds of other scoring statistics.
- Sam Nilsson