olaf greve xlmlwxmillennicscom hi firstly im new list also pretty new sa general try find answers questions faq havent succeeded beyond doubt hope however im flogging dead horse questions appear end messagep secondly id like say sa great tool internetlife much better used without p situation run freebsd 54release amd64 based server installed sa identified pkg_info p5mailspamassassin324_2 amavisdnew precise version according pkg_info amavisdnew2521 invoked mail arrives rx side sendmail rx daemon split two tunnels mail locally amavisdnew using clamd sa mail passes tests gets delivered rest goes directly quarantine problem setup working fine using sa 323 several months virtually spam got however sudden since two weeks im getting 100 spam mails per day seem include spam mails previously seen filtered still far spam get filtered reason perhaps spammers finding ways around sa spam getting approach far figuring sa rules outdated despite twiceweekly call saupdate cron first updated sa 324 performed saupdate real avail amount spam seemed getting checked additional channels soon came across sare based ones decided add saupdatesopenprotectcom channel still amount spam seems get way perform updates follows cron call 23 3 25 usrlocalbinsaupdate allowplugins gpgkeyfile rootsa_pgp_keys channelfile rootsa_channels usrlocaletcrcdsaspamdsh restart devnull yes realise spamd actually used amavisdnew decided running anyway rootsa_channels file contains following saupdatesopenprotectcom updatesspamassassinorg questions 1am anything wrong grossly overlooking something 2ive never tried teach sa messages spam ham gather website need setup mailbox solely spam feed salearn mailbox containing solely ham however best go spam misidentified gets mixed live mailboxes ham wouldnt want classify either ham spam keep spam messages last days perhaps manually forward local mailbox run salearn mailbox getting successfully identified spam work due new mail headers added forward action mail client 3are perhaps good preferrably automatic ways tell sa spam isnt 4are perhaps efficient rules channels recommend add like using full set sare rules rather openprotect subset 5just theory perhaps possible sa somehow misidentified spam message ham messages similar particular spam message misidentified ham hence getting feedback greatly appreciated would like thank taking time read email address questions raised kind regards olaf greve fri 08 aug 2008 060850 0100 properly teach sa recognise spam still getting despite rules updates