Hi, following several users' Inboxes filling up with bogus
(spam-generated) bounce messages, I enabled the Vbounce plugin on our
SMTP gateway, which is running SA 3.2.3 under MIMEDefang. The
complaints have dropped off entirely, and I have had only one false
positive complaint.
The rule that
On Wed, 27 Sep 2006, Shue, Daniel G. wrote:
> # Catch anything from 8:00 PM to 6:00 AM and score it
> header RCVD_AT_NIGHT Date =~ /..., .. ... [0,2][0-5]:..:..*/
> score RCVD_AT_NIGHT 0.001
> describeRCVD_AT_NIGHT Email was received between 8:00PM and
> 6:00AM
If you want t
9 PM
To: users@spamassassin.apache.org
Subject: RE: Newbie Rule Question
Importance: Low
Nice, I like that! Most of our spam also comes in during the wee hours
of
the morning.. I think adding a half point or even a point would help
even
more. Though, I have trained and continue to train both of my s
ewbie Rule Question
I need to check, "Date: Wed, 27 Sep 2006 14:17:17 -0400" and I've looked
Quite ignoring the arguments people will make against this (including me)
you could do something like the following. Of course remember the date
header is when the mail was made in whatever
I need to check, "Date: Wed, 27 Sep 2006 14:17:17 -0400" and I've looked
Quite ignoring the arguments people will make against this (including me)
you could do something like the following. Of course remember the date
header is when the mail was made in whatever timezone it was made, not in
Y
> Hi folks,
> I'm a newbie to SA and have looked at a few tutorials on writing
> custom rules, but they all seem to be too simple for what I want to do.
> That, or I'm not smart enough to figure it out on my own. What I'm
> needing is some guidance on how to write a custom rule that looks at
Hi folks,
I'm a newbie to SA and have looked at a few tutorials on writing
custom rules, but they all seem to be too simple for what I want to do.
That, or I'm not smart enough to figure it out on my own. What I'm
needing is some guidance on how to write a custom rule that looks at the
cre
On Thu, Mar 16, 2006 at 09:28:11PM -0500, Barry Callahan wrote:
> >58.171 62.4003 34.85560.642 0.820.01 T_RECEIVED_COUNT_01
> >I did up a quick check to gather some stats from my corpus (last 14 days).
> Interesting. I don't seem to have that rule. Which ruleset is it in?
> I used gre
Theo Van Dinter wrote:
BTW, it seems weird to me that you see these results.
58.171 62.4003 34.85560.642 0.820.01 T_RECEIVED_COUNT_01
Interesting. I don't seem to have that rule. Which ruleset is it in?
I used grep to search for "RECEIVED_COUNT" in all of my installed
rules
Barry Callahan:
> On a large percentage of the SPAM that gets through, the only
> Received: header that exists was put there by my mailserver.
BTW, it seems weird to me that you see these results.
58.171 62.4003 34.85560.642 0.820.01 T_RECEIVED_COUNT_01
I did up a quick check to ga
On 3/16/2006 5:49 PM, [EMAIL PROTECTED] wrote:
Barry Callahan wrote:
On a large percentage of the SPAM that gets through, the only
Received: header that exists was put there by my mailserver.
The legitimate email, on the other hand ALL has at least one
additional Received: header, OR the machi
Barry Callahan wrote:
> On a large percentage of the SPAM that gets through, the only
> Received: header that exists was put there by my mailserver.
>
> The legitimate email, on the other hand ALL has at least one
> additional Received: header, OR the machine it was received from is
> allowed to
On Thu, Mar 16, 2006 at 05:15:58PM -0500, Barry Callahan wrote:
> I spent some time looking at the SPAM and compared it it to the
> legitimate email I receive.
:)
> So, I was wondering if the following set of logic would be possible to
> implement in SpamAssassin, either as a collection of rule
Barry Callahan wrote:
> I'm running SpamAssassin 3.1.0 with sendmail, and I think it's great.
> I'm using milter-spamc to interface with SpamAssassin running as a daemon.
>
> It doesn't /quite/ catch everything, and some (very little, actually)
> SPAM gets through untagged.
>
> I spent some time
I'm running SpamAssassin 3.1.0 with sendmail, and I think it's great.
I'm using milter-spamc to interface with SpamAssassin running as a daemon.
It doesn't /quite/ catch everything, and some (very little, actually)
SPAM gets through untagged.
I spent some time looking at the SPAM and compared
Any update on when the stock spam rule might be posted? I've fed dozens in to bayes, and they're still making it through.
I have a few custom rules that I have done. I usually look for certain
words in a message, certain URLs, etc.
Today I have run across a new twist (at least for me). The message is in
HTML and the way it is 'printed' is vertically.
LeXaPrMeVaCiAmUlViCe
vinaoprilialbitragle
traxeciadiaum=
isena
>-Original Message-
>From: Matt Kettler [mailto:[EMAIL PROTECTED]
>Sent: Wednesday, May 11, 2005 12:39 PM
>To: Chris Santerre
>Cc: 'Stuart Gall'; users@spamassassin.apache.org
>Subject: Re: Custom Rule question
>
>
>Chris Santerre wrote:
>
>&g
Chris Santerre wrote:
>Eval solution: Count hits, yes. Change score based on hits, no.
>
>
Chris, using an eval solution you could do ranges, much like bayes does.
It would be computationally efficient if done the way bayes does it too
(storing the result on the first call, and only checking va
Chris Santerre wrote:
> Long answer: Multiple meta rules. Take to much computational effort.
> The regex isn't slick for these type of rules either.
The multiple meta rules are the easiest approach to doing this. I have a
number of rulesets which use this trick to count different things. Not
exa
>-Original Message-
>From: Stuart Gall [mailto:[EMAIL PROTECTED]
>Sent: Wednesday, May 11, 2005 10:58 AM
>To: users@spamassassin.apache.org
>Subject: Custom Rule question
>
>
>Hello,
>Sometimes when I create a custom rule I want the score to be added for
>e
Hello,
Sometimes when I create a custom rule I want the score to be added for
each match in the body. and not just an on or off rule.
Is there anyway to do this?
TIA
Stuart Gall
At 10:52 AM 5/9/2005, Michael W Cocke wrote:
Isn't getting caught by this rule?
bodyMWC19 /americaspharma.com/i
describeMWC19 local rule19
score MWC19 20.0
change it from a body rule to a uri rule, also for correctness add a \ in
front of . (otherwise . is a wil
>-Original Message-
>From: Kevin Peuhkurinen [mailto:[EMAIL PROTECTED]
>Sent: Monday, May 09, 2005 11:02 AM
>To: [EMAIL PROTECTED]
>Subject: Re: Stupid rule question
>
>
>Michael W Cocke wrote:
>> This is really getting on my nerves... Using Spamassassin
Michael W Cocke wrote:
This is really getting on my nerves... Using Spamassassin 3.03, could
someone please tell me why this message
-
Dear Customer,
We have all the rx you may need.
http://americaspharma.com/
From hard to find pain killers to diet solutions.
Thank you,
S
This is really getting on my nerves... Using Spamassassin 3.03, could
someone please tell me why this message
-
Dear Customer,
We have all the rx you may need.
http://americaspharma.com/
>From hard to find pain killers to diet solutions.
Thank you,
Supply.
-
26 matches
Mail list logo
