On 08/17/03 11:59 PM, Louis LeBlanc sat at the `puter and typed:
> <snip>
> 
> I like the idea very much.  I've written 5 rules based on those you've
> provided above, and placed them in my ~/.spamassassin/user_prefs as
> follows:
> 
> meta LOCAL_MANY_RBLS_2 ((RCVD_IN_OSIRUSOFT_COM + RCVD_IN_BL_SPAMCOP_NET + 
> RCVD_IN_NJABL + RCVD_IN_DSBL + RCVD_IN_RFCI + RCVD_IN_SBL) >1)
> score LOCAL_MANY_RBLS_2 1.0
> describe LOCAL_MANY_RBLS_2 found in at least 2 RBLs
> 
> meta LOCAL_MANY_RBLS_3 ((RCVD_IN_OSIRUSOFT_COM + RCVD_IN_BL_SPAMCOP_NET + 
> RCVD_IN_NJABL + RCVD_IN_DSBL + RCVD_IN_RFCI + RCVD_IN_SBL) >2)
> score LOCAL_MANY_RBLS_3 1.0
> describe LOCAL_MANY_RBLS_3 found in at least 3 RBLs
> 
> meta LOCAL_MANY_RBLS_4 ((RCVD_IN_OSIRUSOFT_COM + RCVD_IN_BL_SPAMCOP_NET + 
> RCVD_IN_NJABL + RCVD_IN_DSBL + RCVD_IN_RFCI + RCVD_IN_SBL) >3)
> score LOCAL_MANY_RBLS_4 1.0
> describe LOCAL_MANY_RBLS_4 found in at least 4 RBLs
> 
> meta LOCAL_MANY_RBLS_5 ((RCVD_IN_OSIRUSOFT_COM + RCVD_IN_BL_SPAMCOP_NET + 
> RCVD_IN_NJABL + RCVD_IN_DSBL + RCVD_IN_RFCI + RCVD_IN_SBL) >4)
> score LOCAL_MANY_RBLS_5 1.0
> describe LOCAL_MANY_RBLS_5 found in at least 5 RBLs
> 
> meta LOCAL_MANY_RBLS_6 ((RCVD_IN_OSIRUSOFT_COM + RCVD_IN_BL_SPAMCOP_NET + 
> RCVD_IN_NJABL + RCVD_IN_DSBL + RCVD_IN_RFCI + RCVD_IN_SBL) >5)
> score LOCAL_MANY_RBLS_6 1.0
> describe LOCAL_MANY_RBLS_6 found in 6 RBLs
> 
> 
> However, this just came in and it appears there's some kind of test
> execution order problem:
> <SNIP>

Scratch that.  The rules above work just fine:

X-Spam-Report:   ---- Start SpamAssassin results
  23.40 points, 3.7 required;
  *  0.1 -- From: contains numbers mixed in with letters
  *  2.9 -- BODY: Impotence cure
  *  2.1 -- BODY: Information on getting a larger penis or breasts (2)
  *  0.5 -- BODY: Asks you to click below (in capital letters)
  *  1.7 -- BODY: Information on getting a larger penis or breasts
  *  0.2 -- BODY: Claims you can be removed from the list
  *  1.1 -- BODY: HTML link text says "CLICK"
  *  0.1 -- BODY: HTML link text says "click here"
  *  0.2 -- BODY: FONT Size +2 and up or 3 and up
  *  0.1 -- BODY: HTML font color is red
  *  0.1 -- BODY: HTML font color is blue
  *  0.7 -- BODY: Message is 40% to 50% HTML
  *  0.4 -- URI: Uses non-standard port number for HTTP
  *  1.1 -- Date: is 6 to 12 hours after Received: date
  *  4.3 -- RBL: Received via a relay in list.dsbl.org
  [RBL check: found 12.133.145.203.list.dsbl.org.]
  *  0.8 -- RBL: Received via a relay in dnsbl.njabl.org
  [RBL check: found 12.133.145.203.dnsbl.njabl.org., type: 127.0.0.9]
  *  0.9 -- RBL: Received via a relay in relays.osirusoft.com
  [RBL check: found 12.133.145.203.relays.osirusoft.com., type: 127.0.0.9]
  *  3.9 -- Forged mail pretending to be from AOL
  *  0.1 -- Message only has text/html MIME parts
  *  0.1 -- Message has X-MSMail-Priority, but no X-MimeOLE
  *  1.0 -- found in at least 2 RBLs
  *  1.0 -- found in at least 3 RBLs
  *  0.0 -- Message looks like Outlook, but isn't
  ---- End of SpamAssassin results

I don't understand why they didn't appear to work before, but it looks
fine now.

Lou
-- 
Louis LeBlanc               [EMAIL PROTECTED]
Fully Funded Hobbyist, KeySlapper Extrordinaire :)
http://www.keyslapper.org                     ԿԬ

We will have solar energy as soon as the utility companies solve one technical
problem -- how to run a sunbeam through a meter.


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to