SpamAssassin question

[scottm]

I'm finding more than a few spam messages making it to my inbox, even though I have SpamAssassin enabled. Looking at the long headers, I see that these spam messages are getting scores, but they're very low (between 1 and 3 mostly). Is there any way to use these messages that are getting through to "train" the system so that it will have fewer false negatives?

My previous host used SurgeMail as their mail server, and it had the ability to "learn" about spam if you would forward or redirect the false negatives to isspam@yourdomain.com or the false positives to notspam@yourdomain.com

Thanks,
Scott

[H9Dan]

Hello Scott, You have the ability to configure spam assassin from your cPanel account. From there you will be able to add email addresses to the blacklist so that you will not receive email from that address again.

When we upgrade to cPanel 11 it will have a much cleaner look.

[scottm]

Hi Dan,

Thanks. I have done some spamassassin configuring, but I don't want to manually add potentially thousands of email addresses to the blacklist (the same spam email is often sent from many different [possibly spoofed] addresses)

I was hoping for something more along the lines of an automatic (or semi-automatic) process that would help spamassassin learn about the email titles and contents so that it would gradually increase the scores it gives those that I repeatedly tell it "hey, this one was spam and you didn't score it high enough"

I guess the only way is for me to learn the tests that spamassassin uses and then assign higher scores for certain things myself in the configuration area?

[kobra]

but I don't want to manually add potentially thousands of email addresses to the blacklist

You can IP ranges if that helps

[scottm]

Yes, adding IP ranges would be less work than adding multiple email addresses, once I determine the IP ranges to blacklist. Still, not quite the kind of "training" of the system I was hoping for, or the degree of automaticity of it. I guess I was a bit spoiled with the way Surgemail handled it, and was hoping for something similar.