On Sat, 2009-03-28 at 14:32 -0700, RobertH wrote:
> hello
>
> i have problems with the cabletv.org email list.
>
> it is hosted on a charter static and has wierd reverse dns etc etc blah.
>
> so, almost always scores as spam....
>
> here is what it is tripping on...
>
> 0.7 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d
> 1.2 HOST_EQ_STATIC HOST_EQ_STATIC
> 0.7 FH_HOST_EQ_D_D_D_DB Host is d-d-d-d
> 1.3 HOST_EQ_CHARTER HOST_EQ_CHARTER
> 1.9 TVD_RCVD_IP TVD_RCVD_IP
> 0.5 FROM_NOT_REPLYTO From: does not match Reply-To:
> -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
> [score: 0.0000]
> 1.5 SAGREY Adds 1.0 to spam from first-time senders
>
> pastebin said the headers tripped the spam filter so i have to post this
> way...
>
> here are some headers.
>
> http://www.abbacomm.net/temp/salisthdr1.txt
>
> can someone help me formulate a good rule to reduce scoring.
>
> i tried this, yet it is obviously not working because of my faulty logic i
> presume.
>
> header SPEC_DOMAIN_CABLE From =~ /\...@cabletv\.org/
> describe SPEC_DOMAIN_CABLE Reduce score for domain cabletv.org
> score SPEC_DOMAIN_CABLE -5.0
>
> i am looking for something reliable to key on and i am certainly not a rule
> creation expert yet...
>
How about this:
describe CABLE_TV Message is in the Cable TV mailing list
header CABLE_TV List-Id =~ /cabletv-list.cabletv.org/
score CABLE_TV -1.0
Since your example only just counted as spam, a score of -1.0 should be
enough to stop it being labelled as spam while still trapping any
genuine spam on the mail list.
Caveat: This has not been loaded into SA or tested.
Be sure to test it against mail from the list before applying
it permanently.
Martin
