Alex-325 wrote: > I'm interested in experimenting with shortcircuiting, and wondered if > anyone had some examples they're using that they could share? We are using it to shortcircuit HAM and prevent blowing CPU cycles on newsletters that people expect to never contain spam. So, there is a 'shortcircuit.cf' that lives in /etc/mail/spamassassin and looks like this:
loadplugin Mail::SpamAssassin::Plugin::Shortcircuit report Content analysis details: (_SCORE_ points, _REQD_ required, s/c _SCTYPE_) ifplugin Mail::SpamAssassin::Plugin::Shortcircuit # always log shortcircuit status add_header all Status "_YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ shortcircuit=_SCTYPE_ autolearn=_AUTOLEARN_ version=_VERSION_" # Note: add_header statement should be on one line..., your browser might snap that in two # Trusted newsletters meta SC_NEWSLETTER (HAM001||HAM002||HAM003) priority SC_NEWSLETTER -500 shortcircuit SC_NEWSLETTER on score SC_NEWSLETTER 0.1 # JADA Newsletter header __HAM001_FROM Return-Path =~ /.*nce\.j\...@b\.jada\.com/ header __HAM001_SNDR Received =~ /123\.234\.123\./ meta HAM001 (__HAM001_FROM && __HAM001_SNDR) score HAM001 0.1 describe HAM001 Newsletter from jadajada # YON YetAnotherNewsletter header __HAM002_FROM From =~ /.*munication-brie...@yon\.com/ header __HAM002_SNDR Received =~ /12\.13\.14\.1/ meta HAM002 (__HAM002_FROM && __HAM002_SNDR) score HAM002 0.1 describe HAM002 Newsletter from YetAnotherNewsletter # MoreNice stuff (debugged) header __HAM003_FROM Return-Path =~ /....@mail\.morenice\.com|bounce\.j\...@.*/ header __HAM003_SNDR Received =~ /198\.99\.245\./ meta HAM003 (__HAM003_FROM && __HAM003_SNDR) score HAM003 0.1 describe HAM003 Newsletter delivered by MoreNice stuff endif So, a check on Return-Path, combined with the ip address where it comes from, to reasonably prevent any abuse of the shortcut, and a hit results in no more handling by SA and prevent any further CPU load. Given the nature of 'pushy' newsletter-senders, it prevents CPU spikes when some newsletters come in bulk on the electronic doormat. Other then shortcircuiting and saving CPU cycles, it also prevents any false positives on the few selected 'special' newsletters here. -- View this message in context: http://old.nabble.com/Shortcircuit-Rules-tp26116110p26127045.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
