The configuration we provide here is similar to the SpamAssassin configuration used for the VBSpam email security tests carried out by Virus Bulletin. We keep it tuned and update it from time to time. It uses the Spamhaus Data Query Service as the only external data source, and does other safe tricks to decrease the amount of spam passing through.
