whitelist-to, more-spam-to and all-spam-to are great ways of preventing various mailing lists from not being tagged when sample spams are posted and discussed on them. However this doesn't really help much with off-list discussions that have spam content. So I made these three body text rules to try to bounce-down the scores of such emails. I think they're pretty good rules for general inclusion, particularly SPAMASSASSIN_MENTIONED (if a spammer is going to mention, and thus promote the use of SA, more power to em).
Now these rules won't help the really-high-scoring mails, but will help prevent the causal discussion of a handful of rules from going over the threshold. Prior to whitelisting the SA mailing lists, I was getting a pretty good number of mails scoring in the 5-10 range, and only a few that scored a lot higher, so I'm using 10 as a baseline for the scores I've put in. I figure some spammer somewhere might mention a project on sourceforge, so I put a little less faith in that rule. Anyone see anything good/bad about these rules and how they're written? Anyone ever get a spam mail mentioning SA, bugtraq or sourceforge (I don't have any)? body SPAMASSASSIN_MENTIONED /\bSpamAssassin/i describe SPAMASSASSIN_MENTIONED mentions SpamAssassin in body score SPAMASSASSIN_MENTIONED -5.0 body BUGTRAQ_MENTIONED /\bbugtraq/i describe BUGTRAQ_MENTIONED mentions Bugtraq in body score BUGTRAQ_MENTIONED -5.0 body SOURCEFORGE_MENTIONED /\bsourceforge/i describe SOURCEFORGE_MENTIONED mentions Sourceforge in body score SORCEFORGE_MENTIONED -3.0 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
