I've found it helpful to use the following rule, which tends not to have too many false negatives actually:
# Take off points for possible mailing lists header FNET_MAILING_LIST Subject =~ /\[*\]/i score FNET_MAILING_LIST -5.0 describe FNET_MAILING_LIST Possibly part of a mailing list If the subject contains brackets, like most mailing lists, it gets 5 bonus points. It's enough to let valid mailing lists by, but still catch it if it's really bad looking spam. We've found it to work well. In our experience, complaints about not getting their mailing lists have greatly outweighed the SPAM complaints (although there are a lot of both). Richard -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David B Funk Sent: Thursday, November 27, 2003 5:39 AM To: Martin Lyberg Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] How to whitelist this mailinglist On Thu, 27 Nov 2003, Martin Lyberg wrote: > Hi, > > I want to whitelist the SA mailinglist. Is this the right way to do it: > > whitelist_from_rcvd [EMAIL PROTECTED] sourceforge.net > > Thanks in advance > > / Martin Almost, whitelist_from_rcvd [EMAIL PROTECTED] sourceforge.net will work PROVIDED your mail system makes the envelope sender address available to SA in a form that it understands. Ordinarily the 'From:' address is checked, but for this list that is set to the originator of the message and thus unpredictable. The envelope sender is always the same "[EMAIL PROTECTED]" (most mailing-list systems work this way). You need to configure your mail system to put the envelope sender address in one of the following headers before it hands it to SA: Envelope-Sender Resent-Sender X-Envelope-From Return-Path Resent-From (see EvalTests.pm for the details). -- Dave Funk University of Iowa <dbfunk (at) engineering.uiowa.edu> College of Engineering 319/335-5751 FAX: 319/384-0549 1256 Seamans Center Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527 #include <std_disclaimer.h> Better is not better, 'standard' is better. B{ ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk