On Thu, Apr 07, 2005 at 11:00:52AM +0100, Ron McKeating wrote: > On Thu, 2005-04-07 at 10:53 +0100, Matthew Newton wrote: > > Ron, > > > > On Thu, Apr 07, 2005 at 10:23:24AM +0100, Ron McKeating wrote: > > > Thanks to all of you who replied about the job offer spams. Could > > > anybody point at the best site for the latest rulesets and an > > > explanation of what each one does. > > > > The "main" site for rules is generally http://www.rulesemporium.com/, > > and spefically the http://www.rulesemporium.com/rules.htm page. They > > have descriptions for what they do. You'll also find more on > > http://www.exit0.us/, including the RulesDuJour script at > > http://www.exit0.us/index.php?pagename=RulesDuJour that will > > automatically check for new rules for you. > > > > I can send you the current RulesDuJour settings I am using, if you like, > > assuming you are not already using it. You should check it yourself and > > make sure you are happy with the rules yourself, though. > > > > I still find that there are some spam messages that don't seem to be > > covered by rules, so end up writing my own. I'm no expert, but basic > > rule-writing isn't that hard if you can write regular expressions. > > > > Matthew > > > > Thanks to all the replied, we have rules_du_jour and I am now getting an > idea of how it works. I suppose the obvious question is has anybody > written a good howto on writing your own rules. And if so where is it?
http://wiki.apache.org/spamassassin/WritingRules is good. Remember to run "spamassassin --lint" before restarting SA to make sure you haven't made any errors. I usually score my rules with 0.1 first to see how messages are hitting them, and then increase after a few days. http://www.exit0.us/index.php?pagename=RulesBasics may also be useful. The most confusing thing I originally found was the difference between body, rawbody and raw. The exit0.us page above seems to explain that fairly well. Matthew -- Matthew Newton <[EMAIL PROTECTED]> UNIX and e-mail Systems Administrator, Network Support Section, Computer Centre, University of Leicester, Leicester LE1 7RH, United Kingdom