On Sun, 2009-02-01 at 16:02 -0800, Linda Walsh wrote: > I have some email accounts that I use with particular vendors or lists. I > have > a few email accounts only known to a single person or company. > > What I'd like to do is someway of white-listing a "to-addr" if it is from a > list > of "from-addrs"....else add something (constant?) to its spam score.
You can do both easily with header and meta rules. Depends on your amount of specialized addresses, and how frequently you're changing them. The header rules should check for certain To and From addresses, using the non-scoring double-underscore sub-rules. You can then create meta rules to assign a negative score for known good combinations, or add a point for a non-match. References: http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html http://wiki.apache.org/spamassassin/WritingRules Looking at your sender address and having in mind you mentioned lists to apply this to... You should be careful with the score. If I would Cc you on this reply, is it spam? Also, with mailing lists, you'd need to check different headers than From. > An even more advanced but non-trivial check would be "if to addr(X), and not > in > my contacts(addr-book), then SPAM, else ok.... Sounds like the third-party "Addressbook" plugin. http://wiki.apache.org/spamassassin/CustomPlugins Highly depends on the format of your address-book. Also, you'd need to have your address-book stored on the server... Oh, yeah, and spammers *do* kind of abuse this. In the sense of the recent "From and To are identical" threads, I frequently see them forging user A to send a message to A, B and C at the same domain. That effectively means that a dumb know-From check doesn't cut it... AWL is your friend. guenther -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
