I’m running spamassassin 3.4.2-0 in ubuntu 18.04.4.
Controlling process is
/usr/bin/perl -T -w /usr/sbin/spamd -d --pidfile=/var/run/spamd.pid
--create-prefs --max-children 5 --helper-home-dir
My local.cf has local rules enabled, and contains, inter alia, these rules
=========
header CASINO From =~ /\bcasino\b/i
score 100.0
header CASINOS From =~ /\bcasinos\b/i
score 100.0
header CASINO_DONOVAN From =~ /\bray donovan\b/i
score 100.0
header CASINO_OLIVIA From =~ /\bolivia.*cs\b/i
score 100.0
header BAD_WORDS_1 From =~
/\b(swimming|solarbank|bag|intelligent|napkin|stretcher)\b/i
score 6.0
header BAD_WORDS_2 From =~
/\b(smart|amazing|clavicle|slicer|indestructible|bamboo)\b/i
score 6.0
header BAD_WORDS_3 From =~
/\b(innovation|selfie|socks|healthreporters|thermovest)\b/i
score 6.0
header BAD_WORDS_4 From =~
/\bdrone\b|\bremover\b|\btrainer\b|\btactical\b|\bsmart watch\b/i
score 6.0
header BAD_WORDS_5 From =~ /(\blost\b.*[0-9]+.*lbs\b)/i
score 10.0
header BAD_WORDS_6 From =~ /\bdrone\b|\bprofessional\b|\bslim\b|\bmini\b/i
header AUSPOST_GOOD From =~ /auspost\.com\.au/
score -20.0
header AUSPOST_BAD From =~ /Australia Post/
score 20.0
=======
The casinao stuff is still getting through. Here’s the X-Spam-Status on a
typical message.
X-Spam-Status: No, score=4.1 required=5.0 tests=CASINO,DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,HTML_MESSAGE,MAILING_LIST_MULTI,RAZOR2_CF_RANGE_51_100,
RAZOR2_CHECK,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED shortcircuit=no
autolearn=no autolearn_force=no version=3.4.2
It’s hitting the CASINO rule, but no matter what valoue I assign to the casino
rules - 5, 20 , 100, these messages always come through with a value of 4.1.
It’s as though some toerh rule is resetting the score to 0 before proceeding.
My other query concerns the AUSPOST rules. What I want to do is elminate mail
that has a name of “AUSTRALIA POST” and does NOT have an address containing
<auspost.com.au>. Hence I’m trying the -20.0 +20.0 pair of rules. Is there a
more direct way of achieving this? Will a pcre ’not followed by’ style of rule
do the trick?
Is there a finer subdivision of the From header; into name and address, for
example.
peter
—
p...@ehealth.id.au
“Two men went up into the temple to pray, one a Pharisee and the other a tax
collector.”
