On Monday 18 March 2002 10:22 am, CertaintyTech - Ed Henderson wrote:
> I am very pleased with SA and the job it is doing. Good job to all!
>
> But...In my situation if SA makes a false positive it is often on mailing
> list type emails. Perhaps a user has suscribed to a joke of the day or
> some hobby list, etc... Has anyone developed any custom rules what would
> give -ve scores to messages that look like lists? Perhaps some
> characteristics typical of list emails? I do realize that this is very
> difficult since many list messages are very Spammy looking. Also, many
> Spam messages have the appearance of being from an opt-in list. ARGHHH!
Here's some rules that I have for lists:
# Only look for 7 bit chars between square brackets, because a lot
# of spam with 8 bit chars in the subject would match this rule
header ELIST_1 Subject =~ /^.{0,6}\[[\000-\177]{2,20}\]/
describe ELIST_1 Subject has something between square brackets
header ELIST_2 List-Unsubscribe =~ /./
describe ELIST_2 List-Unsubscribe field exists
header ELIST_3 X-Original-Date =~ /./
describe ELIST_3 X-Original-Date field exists
header ELIST_4 Errors-To =~ /./
describe ELIST_4 Errors-To field exists
header ELIST_5 Precedence =~ /bulk/i
describe ELIST_5 Prescendce is bulk
header ELIST_6 Mailing-List =~ /./
describe ELIST_6 Mailing List field exists
header ELIST_7 ALL =~ /(?:noreply|nobody)\@(?!localhost)/i
describe ELIST_7 Reply to nodoby/noreply
score ELIST_1 -1.0
score ELIST_2 -1.0
score ELIST_3 -1.0
score ELIST_4 -1.0
score ELIST_5 -1.0
score ELIST_6 -1.0
score ELIST_7 -1.0
--
Visit http://dmoz.org, the world's | Give a man a match, and he'll be warm
largest human edited web directory. | for a minute, but set him on fire, and
| he'll be warm for the rest of his life.
[EMAIL PROTECTED] ICQ: 132152059 |
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
