I am used Exim 2.55 with Exim and exiscan-acl but I have noticed that
spam messages are not being tagged. My local.cf is:

required_hits 10.0
rewrite_subject 1
spam_level_char *
spam_level_stars 1
skip_rbl_checks 1
dns_available no
check_mx_attempts 0
check_mx_delay 5
report_safe 0
use_terse_report 1
always_add_headers 1
always_add_report 1
detailed_phrase_score 1
defang_mime 1
local_tests_only 1
auto_learn 0
use_dcc 1
use_razor1 0
use_razor2 0
use_pyzor 0
score USER_IN_WHITELIST  -100.0
score USER_IN_WHITELIST_TO -100.0
score USER_IN_BLACKLIST 100.0
auto_whitelist_factor 0.5
auto_whitelist_file_mode 0666

uri   MISUSED_REDIR_01  /http:\/\/.{1,50}\.tripod\.com\.[a-z]{2,}/i
score   MISUSED_REDIR_01  3.4
describe  MISUSED_REDIR_01  Uses commonly-spammed redirector URL (1)
uri   MISUSED_REDIR_02  /http:\/\/s?rd\.yahoo\.com/i
score   MISUSED_REDIR_02  3.4
describe  MISUSED_REDIR_02  Uses commonly-spammed redirector URL (2)
uri   MISUSED_REDIR_03  /http:\/\/usuarios\.lycos\.es/i
score   MISUSED_REDIR_03  3.4
describe  MISUSED_REDIR_03  Uses commonly-spammed redirector URL (3)

uri   DOMAIN_ENDS_NUMS
/[.\/@]+[a-zA-Z]+[a-zA-Z0-9\-]*\d+\.(com|net|biz|info)/i
describe  DOMAIN_ENDS_NUMS  Domain name ends with numbers
score   DOMAIN_ENDS_NUMS  0.3

uri   DOMAIN_STARTS_NUMS
/[.\/@]+\d+[a-zA-Z\-]+[a-zA-Z0-9\-]*\.(com|net|biz|info)/i
describe  DOMAIN_STARTS_NUMS  Domain name starts with numbeRS
rawbody DOMAIN_TLDS /(\s+\.(org|biz|tv|club|inc|law){1}\s+){3}/
describe DOMAIN_TLDS Offers domain transfer to new tlds. Probably 2 rows
of 3 tlds.
score DOMAIN_TLDS 3

header    LC_ISO_8559  Subject=~ /ISO-8859-1/i
describe  LC_ISO_8559  SUBJECT: ISO-8559--probably spam -LAC
score     LC_ISO_8559  1.5

header LISTUNSUBSCRIBE  exists:List-Unsubscribe
describe LISTUNSUBSCRIBE  Message has X-List-Unsubscribe header
score  LISTUNSUBSCRIBE  -10




-- 
Q: Because it reverses the logical flow of conversation.
A: Why is top posting frowned upon?

Normal Email sean AT tcob1 DOT net  GPG Key Id 7DA70294
              ICQ: 679813  Jabber: [EMAIL PROTECTED] 
                 THIS IS A SPAM HONEYPOT ADDRESS
I Didn't Climb to the Top of the Food Chain to Be a Vegetarian.




-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to