Kenneth Porter wrote:
--On Thursday, August 06, 2009 2:53 PM -0400 Michael Scheidell <scheid...@secnap.net> wrote:

enable the ASN plugin.. it will create bayes tokens.

then train your system, any ASN that sends you mostly spam will hit
bayes_>50%?

Is there a way to get the ASN plugin to report on other than the first hop in the header? I have SA running on an internal server so I need to look at the 2nd hop.

I don't see any options to accomplish this here:

<http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Plugin_ASN.html>

Use this to lookup the ASN info for first external IP address in the specified zone and add the AS number to the first specified tag and routing info to the second specified tag.

thats FIRST EXTERNAL.

so, set your localnets correctly so that the 1st hop is not 'first external' (or first untrusted)?



_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/
_________________________________________________________________________

Reply via email to