Re: Rule for single URL in body with very few text

2014-08-12 Thread Karsten Bräckelmann
On Tue, 2014-08-12 at 11:42 -0400, Karl Johnson wrote: > Thanks for the rule Karsten. I've already searched the archive to find > this kind of rule and found few topic but I haven't been able to make > it works yet. I will try this one and see how it goes. Searching is much easier, if you know som

Re: Rule for single URL in body with very few text

2014-08-12 Thread Karl Johnson
On Mon, Aug 11, 2014 at 5:46 PM, Karsten Bräckelmann wrote: > On Mon, 2014-08-11 at 15:48 -0400, Karl Johnson wrote: > > Is there any rule to score an email with only 1 URL and very few text? > > It could trigger only text formatted email because they usually aren't > > in HTML. > > Identify very

Re: Rule for single URL in body with very few text

2014-08-11 Thread Karsten Bräckelmann
On Mon, 2014-08-11 at 22:57 +0300, Jari Fredriksson wrote: > * 1.8 DKIM_ADSP_DISCARD No valid author signature, domain signs all mail > * and suggests discarding the rest > This is a corner case. I got it tagged, but probably just because I > tested it later and URIBL has it now. M

Re: Rule for single URL in body with very few text

2014-08-11 Thread Karsten Bräckelmann
On Mon, 2014-08-11 at 15:48 -0400, Karl Johnson wrote: > Is there any rule to score an email with only 1 URL and very few text? > It could trigger only text formatted email because they usually aren't > in HTML. Identify very short (raw)bodies. rawbody __RB_GT_200 /^.{201}/s meta__RB_LE_

Re: Rule for single URL in body with very few text

2014-08-11 Thread Jari Fredriksson
11.08.2014, 22:48, Karl Johnson kirjoitti: > Hello all, > > I've recently installed Spamassassin (v3.3.1) + Amavis on a SMTP MTA > server which is only used for outgoing email. I had to install SA to > deal with compromised accounts that are used to send spam. It works > pretty good for now however

Rule for single URL in body with very few text

2014-08-11 Thread Karl Johnson
Hello all, I've recently installed Spamassassin (v3.3.1) + Amavis on a SMTP MTA server which is only used for outgoing email. I had to install SA to deal with compromised accounts that are used to send spam. It works pretty good for now however spam with only 1 URL in the body and few text are sti