Saying that it’s everywhere wouldn’t be an overstatement. Do so by adding a line like the following to your local.Spam easily makes up the majority of emails sent worldwide. Scan your corpus – how many emails match this rule? If it matches 300 spam and 3 ham, then at your site it's a very strong spam indicator, and the score should likely be increased. The highest scoring rule is PLING_PLING (testing for !!! in the subject header). Feed this email to Bayes as spam, and that will help identify future emails as spam. score PLING_PLING 1.047 1.325 1.157 0.650īAYES_50 you don't want to do anything about – Bayes does not (yet) know whether this email is spam or ham, so it gives effectively no score.You'll find their scores listed in the rules/50_scores.cf file within the SA directories. The rules which match are shown in the X-Spam-Status header. MIME_HTML_ONLY,PLING_PLING autolearn=no version=2.60 HTML_FONTCOLOR_UNKNOWN,HTML_FONTCOLOR_UNSAFE,HTML_MESSAGE, X-Spam-Status: No, hits=1.3 required=9.0 tests=BAYES_50, X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-exp) on Given a conservative system, which has significantly increased the required hits parameter You can then increase or decrease the score to better characterize your email. Given you have identified a rule which might need to have its score changed, scan your corpus to determine the hit frequency for that rule. Assuming you can collect such a corpus, there are several ways to scan that corpus and count rule hits, from using grep and wc to using the search functions of an email client like The Bat! You can also use the MassCheck functionality installed with SA. It's best if you have a corpus of spam and non-spam which can be searched to determine the frequency with which various rules hit. Look in the headers to find those rules that can have their scores decreased. Examine non-spam that was wrongly flagged as spam.Those are the rules that can have their scores increased. Look in the headers, and see what rules hit for this email. Examine spam that did not get properly flagged.To determine which scores should be modified for your system, Medical organizations and users will need to score medical and drug-related rules lower than the general population, while mortgage brokers will need to lower the scores of mortgage and debt-related rules. Non-spam has different attributes for different people.You've modified the required hits parameter (up or down), and therefore need to modify at least some of the default scores to properly flag your spam.There are two basic reasons why you might want to change the default scores of the distribution rule set: The primary SA documentation at defines the required_hits parameter, and states,ĥ.0 is the default setting, and is quite aggressive it would be suitable for a single-user setup, but if you're an ISP installing SpamAssassin, you should probably set the default to be more conservative, like 8.0 or 10.0. If the resulting score is high enough (equal or greater than the Required Hits parameter), the email is declared to be spam. Emails are tested to see which rules apply, and the scores of those rules that do apply to the email are added together.
![spamassassin scores spamassassin scores](https://www.hostdime.com/blog/wp-content/uploads/2014/09/cPanel-SpamAssassin-White.png)
![spamassassin scores spamassassin scores](https://www.webhostface.com/kb/wp-content/uploads/2017/05/apache.jpg)
![spamassassin scores spamassassin scores](https://www.webhostinghub.com/help/images/stories/edu/cpanel/mail/spamassassin/change-spam-score/change-score.png)
SpamAssassin is distributed with rules designed to differentiate between spam and ham.