On Thu, Apr 07, 2005 at 11:00:52AM +0100, Ron McKeating wrote:
> On Thu, 2005-04-07 at 10:53 +0100, Matthew Newton wrote:
> > Ron,
> > 
> > On Thu, Apr 07, 2005 at 10:23:24AM +0100, Ron McKeating wrote:
> > > Thanks to all of you who replied about the job offer spams. Could
> > > anybody point at the best site for the latest rulesets and an
> > > explanation of what each one does.
> > 
> > The "main" site for rules is generally http://www.rulesemporium.com/,
> > and spefically the http://www.rulesemporium.com/rules.htm page. They
> > have descriptions for what they do. You'll also find more on
> > http://www.exit0.us/, including the RulesDuJour script at
> > http://www.exit0.us/index.php?pagename=RulesDuJour that will
> > automatically check for new rules for you.
> > 
> > I can send you the current RulesDuJour settings I am using, if you like,
> > assuming you are not already using it. You should check it yourself and
> > make sure you are happy with the rules yourself, though.
> > 
> > I still find that there are some spam messages that don't seem to be
> > covered by rules, so end up writing my own. I'm no expert, but basic
> > rule-writing isn't that hard if you can write regular expressions.
> > 
> > Matthew
> > 
> 
> Thanks to all the replied, we have rules_du_jour and I am now getting an
> idea of how it works. I suppose the obvious question is has anybody
> written a good howto on writing your own rules. And if so where is it?

http://wiki.apache.org/spamassassin/WritingRules is good. Remember to
run "spamassassin --lint" before restarting SA to make sure you haven't
made any errors. I usually score my rules with 0.1 first to see how
messages are hitting them, and then increase after a few days.

http://www.exit0.us/index.php?pagename=RulesBasics may also be useful.

The most confusing thing I originally found was the difference between
body, rawbody and raw. The exit0.us page above seems to explain that
fairly well.

Matthew


-- 
Matthew Newton <[EMAIL PROTECTED]>

UNIX and e-mail Systems Administrator, Network Support Section,
Computer Centre, University of Leicester,
Leicester LE1 7RH, United Kingdom

Reply via email to