Greetings I have a suggestion for a new type of rule, based on observations of when I receive a lot of spam, and when I don't. (runnning a 2000 users mail server here).
Graphing spam and ham amounts, with the help of spamstats (http://www.gryzor.com/tools), I notice the legitimate emails mostly arrive from about 9am, until maybe 7pm, on working days. Of course this may widely change for some other sites. Some of my site's spam graphs are available here : http://www.gryzor.com/tools/spamstats-pics.html , the first graph is the intersting one. Anyway, the important fact here is that very few hams come in at night time, and even less during week ends. But the spam rate is near constant, and therefore, in proportions, I receieve a lot of spam at night and during week end. In other words, any email coming in at those times has a high probability of being a spam. Therefore, it might be a good idea to score maybe 1 point, maybe 2 for any email passing through spamassassin at such times. I have not seen this in SA 2.55 (I may have mislooked), and I don't know whether it's already planned in 2.60? Of course, ISPs running international relays, and sites dealing with world-wide customers are not so interested in this, but many other sites may find advantages in such a configuration. Therefore I suggest a configurable (maybe even not activated by default) time frame be set into spamassassin engine, and low scores could be added to emails coming through at "strange" times. Well, I suggest this be discussed :-) Of course, this will hit few legitimate emails, but this is the way spamassassin always worked : cross as many criterias as possible. By the way, this would be a rule that spammers can hardly turn around, which can make it very intersting. Waiting for your opinions here. Vincent ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
