This one works like magic .. Also on the new variant which seems to have been
released this weekend.
body L_DRUGS11 /([CVAXP] ){5}/
header L_DRUGS12 MESSAGEID =~
/^<[EMAIL PROTECTED]>/
meta L_DRUGS1 L_DRUGS11 && L_DRUGS12
score L_DRUGS1 5
describe L_DRUGS1 Strange Message-ID and Spam signature i
I only got my hands on 3 of those, and they all have a very similar
Message-IDs
Message-ID: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
I have put the following on 2 of our SA servers, thanks for your
contribution:
bodyL_DRUGS11 /([CVAXP] ){5}/
I´m just wondering if I could reduce the memory usage with some config
change.
I´m using SpamAssassin 3.0.4 with ´spamd´ / spamc and each process uses about
20 MB + 14MB shared
Also, the load on the machine is usually 30-60% and I can't seem to pinpoint
where that is coming from.
It doesn't look
Is here an easy way to exclude domains from eval:check_rbl_sub checks ?
It appears that hotmail.com hits DNS_FROM_RFC_ABUSE Because of "political
reasons".
(Or at least reasons I don´t completely agree with)
See: http://www.rfc-ignorant.org/tools/lookup.php?domain=hotmail.com
Is there any way t
Can anyone explain to me what the URIBL_SBL rule does (I.e. which list Is
used)
I have an email that this rule catches because of a email address inside it.
The SpamAssassin report lists it as :
0.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: gov.ru]
But no m
At last I have filled out the Sourceforge page for SAQuarantine.
http://sourceforge.net/projects/saq
SAQuarantine is a plugin for Postfix that picks potential Spam emails out of
the mailstream and puts them in a Quarantine.
Instead of being delivered straight to user´s inboxes, potential Spam
Whoever configured SA for [EMAIL PROTECTED] must have either modified
the points or lowered the "required" limit.
I ran my_rules_du_jour this morning and the SA report in your mail, as it got
to my Inbox was :
X-Spam-Status: No, hits=-9.9 required=5.0 tests=BAYES_00,DRUGS_ERECTILE,
USER_
X-Spam-Status: Yes, hits=4.0 required=4.0 tests=CIALIS2 autolearn=no
version=2.64
X-Spam-Report:
* 4.0 CIALIS2 BODY: Contains the word "cialis".
This is not a SA problem, this is a "User Problem".
Whoever creates a word-matching rule that, alone, gives the required number
of
