LuKreme, > Been getting a lot of messages form hotmail and others claiming to be from > Blizzard account management or Aeon account services, or a whole host of > others. > > They are not pegging SA at all, scoring usually close to 0 (they will get > Bayes_00 and sometimes a spamcop hit to balance out, but nothing else). > > Has anyone come up with anything to catch these without tripping on really > messages from blizzard and whomever? > > Blizzard, at least, publishes DKIM records, so is the syntax for dealing > with that still the same in 3.3? > > whitelist_from_dkim *...@blizzard.com > whitelist_from_dkim *...@battle.net
The syntax hasn't changed - the DKIM plugin docs is up-to-date, see there. Note that the above does not imply their subdomains (e.g. email.blizzard.com), these may be whitelisted separately is desired. > As I recall, however, what I actually want to do is blacklist anything from > blizzard.com that FAILS (or lacks) DKIM, right? > > I know I used to do this crap for paypal and citibanc and a few others, but > now I don't remember what, exactly, I did. In this case all you need (since 3.3.0) is an ADSP override, no need for whitelisting: score DKIM_ADSP_CUSTOM_HIGH 100 adsp_override battle.net custom_high adsp_override email.blizzard.com custom_high or more general: adsp_override blizzard.com custom_high adsp_override *.blizzard.com custom_high Adjust scores as needed, the defaults are very cautious (just in case someone is running SpamAssassin behind a mail path which clobbers messages, invalidating signatures): score DKIM_ADSP_CUSTOM_LOW 0.001 score DKIM_ADSP_CUSTOM_MED 0.001 score DKIM_ADSP_CUSTOM_HIGH 0.001 score DKIM_ADSP_ALL 0 1.1 0 0.8 score DKIM_ADSP_DISCARD 0 1.8 0 1.8 Mark
