On 11/01/2017 01:39 PM, Gary Smith wrote:
We have recently seen a huge uptick in spam from a bunch of different TLD's.  
Bayes has been a little whacky with them as well.  Our install is 3.3.1 (we're 
going to be replacing it soon).

I'm looking to implement a rule that will assign a higher score to specific 
TLD's.  I tried the rule below based upon the guidelines from 
https://wiki.apache.org/spamassassin/WritingRules.  Nothing seems to hit it 
though.

header HS_BAD_DOMAIN From =~ 
/^\.(top|study|click|party|link|stream|info|trade|bid|xxx)/i
describe HS_BAD_DOMAIN Contains one of the bad domains that commonly spams
score HS_BAD_DOMAIN 0.1 0.1 0.1 0.1


You are close but your regex is a little off. Use https://regex101.com/ to test your regex.

/\.(top|study|click|party|link|stream|info|trade|bid|xxx)$/

--
David Jones

Reply via email to