<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Malgun Gothic";
panose-1:2 11 5 3 2 0 0 2 0 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@Malgun Gothic";
panose-1:2 11 5 3 2 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1789201999;
mso-list-template-ids:784479598;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><a name="_MailEndCompose"><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thank you; I have not tried this and will do so.<o:p></o:p></span></a></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Christopher Kurtis Koeber<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> Nick Rosier [mailto:nick.rosier@gmail.com] <br><b>Sent:</b> Thursday, June 20, 2013 4:33 PM<br><b>To:</b> Christopher Koeber<br><b>Cc:</b> amavis-users@amavis.org<br><b>Subject:</b> Re: Improving filtering of SPAM...<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p>Stupid autocorrect. s/postscript/postscreen/<o:p></o:p></p><div><p class=MsoNormal>Op 20-jun.-2013 22:31 schreef "Nick Rosier" <<a href="mailto:nick.rosier@gmail.com">nick.rosier@gmail.com</a>> het volgende:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p>Have you activated postscript in Postfix? It was a major improvement for me. The less spam makes it to amavisd, the better. And if you don't mind a little delay on some mails you can also install a greylisting server. <o:p></o:p></p><p>Wietse describes a very good strategy (which I'm using) here: <a href="http://www.postfix.org/POSTSCREEN_README.html" target="_blank">http://www.postfix.org/POSTSCREEN_README.html</a><o:p></o:p></p><p>N. <o:p></o:p></p><div><p class=MsoNormal>Op 20-jun.-2013 22:19 schreef "Christopher Koeber" <<a href="mailto:ckoeber@gmail.com" target="_blank">ckoeber@gmail.com</a>> het volgende:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'>Hello,<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'>I have AmavisD with the following software running on Gentoo Linux (Kernel Version 3.8.13):<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'><o:p> </o:p></span></p></div><div><ol start=1 type=1><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span style='font-family:"Tahoma","sans-serif"'>Postfix (Version 2.10.)</span><o:p></o:p></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span style='font-family:"Tahoma","sans-serif"'>SpamAssassin (Version 3.3.2-r1)</span><o:p></o:p></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span style='font-family:"Tahoma","sans-serif"'>ClamAV (Version 0.97.7)</span><o:p></o:p></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span style='font-family:"Tahoma","sans-serif"'>DCC (Version 1.3.140-r1)</span><o:p></o:p></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span style='font-family:"Tahoma","sans-serif"'>Razor (Version 2.85-r1)</span><o:p></o:p></li></ol><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'>There are perhaps quite a few other packages I have installed; I just know these are the major ones I have installed.</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'>Anyway, everything works but quite frankly my users still get a significant amount of spam coming through (no viruses whatsoever, so the ClamAV aspect works great.)</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'>The core problem is that, from what I see from the logs the score for the spam messages gets rated lower than zero so the system is learning these messages as ham and as such the filter becomes less effective as time goes on.</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'>Now, the current install isn't completely ineffective; it catches a great deal of spam messages but my question stems from asking what can I do to greatly increase the accuracy.</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'>Is there a guide somewhere on improving detection of spam with AmavisD? I couldn't find such a guide. Much of the items mentioned for improving SpamAssassin was within the "<a href="http://local.cf" target="_blank">local.cf</a>" file but I know AmavisD ignores that (from what I read). I also know I can lower the tag/tag2/etc. numbers but then valid mail gets caught.</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Tahoma","sans-serif"'>Any help in this area would be much appreciated.</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-family:"Tahoma","sans-serif"'>Thank you.</span><o:p></o:p></p></div></div><div><p class=MsoNormal>Regards,<br>Christopher Koeber<o:p></o:p></p></div></div></blockquote></div></blockquote></div></div></body></html>