> I've fed probably 50 of those paypal/ebay phishing scams thru
sa-learn-spam,
> but SA-3.10 hasn't caught a single one of them so far.
Bayes won't help much on the better phish if you also get a bunch of legit
paypal/ebay messages. It should do well on the ones written by the
english-isn't-my-language crowd.
> Also, should I be getting emails from rules_du_jour? I have it in the
root
> crontab so it should be working.
Yes, now and then. You should only get something when a ruleset is updated.
I don't know that any rulesets have necessarily been updated in the last
week or so. It would be somewhat unusual to see more than 2-4 updates a
week on average, and usually less than that.
If you don't have sare_specific.cf and sare_fraud.cf you should get those,
they will help.
Loren
