On 11/01/2017 01:39 PM, Gary Smith wrote:
We have recently seen a huge uptick in spam from a bunch of different TLD's.
Bayes has been a little whacky with them as well. Our install is 3.3.1 (we're
going to be replacing it soon).
I'm looking to implement a rule that will assign a higher score to specific
TLD's. I tried the rule below based upon the guidelines from
https://wiki.apache.org/spamassassin/WritingRules. Nothing seems to hit it
though.
header HS_BAD_DOMAIN From =~
/^\.(top|study|click|party|link|stream|info|trade|bid|xxx)/i
describe HS_BAD_DOMAIN Contains one of the bad domains that commonly spams
score HS_BAD_DOMAIN 0.1 0.1 0.1 0.1
You are close but your regex is a little off. Use https://regex101.com/
to test your regex.
/\.(top|study|click|party|link|stream|info|trade|bid|xxx)$/
--
David Jones