I run Kmail with SA 3.0.1, and I filter by piping incoming mail to spamc.
I am currently using SARE_OEM SARE_GENLSUBJ SARE_GENLSUBJ_ENG SARE_HTML1 SARE_HTML2 SARE_HEADER1 SARE_HEADER2 SARE_HTML_ENG SARE_BML SARE_FRAUD SARE_SPOOF SARE_UNSUB SARE_RANDOM SARE_TOP_200 and BOGUSVIRUS as my rulesets.
All I want to do is push the scores into the spam range. And frankly I think I could lower the bar, too. Are their rulesets that might help, or custom rules that I could write, and as a single user I don't need perfection, I just want something like a 95% catch ratio instead of the 60% I am currently getting.
Foobar replaces a couple of the words in the headers that I am sensitive about releasing to the net.
Here are the headers for brevity:
Return-Path: <[EMAIL PROTECTED]>
Received: from 43.bevivek.com ([192.168.1.3]) by mta010.foobar.net
(InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Fri, 19 Nov 2004 01:59:35 -0600
Received: from 43.bevivek.com (66.63.188.43) by sc009pub.foobar.net (MailPass SMTP server v1.1.1 - 121803235448JY) with SMTP id <1-995-125-995-132708-13-1100851174> for mta010.foobar.net; Fri, 19 Nov 2004 01:59:36 -0600
From: Hair Care Specialist<[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Medical Hair Restoration - A Permanent Solution
Date: 19 Nov 2004 02:52:49 -0500
Message-Id: <[EMAIL PROTECTED]/peno>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="09845039450394qame.kjY-mkxGxhki/penoirmar"
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on Timmy
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=5.0 tests=ALL_NATURAL,BAYES_99,
HTML_IMAGE_RATIO_04,HTML_MESSAGE autolearn=no version=3.0.1
X-UID: Status: RO
X-Status: RC
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent:
--09845039450394qame.kjY-mkxGxhki/penoirmar Content-Type: text/plain; charset = "ISO-8859-1" Content-Transfer-Encoding: 8bit
Next:
Return-Path: <[EMAIL PROTECTED]>
Received: from lamx25.havagreayday.com ([192.168.1.2])
by mta005.foobar.net
(InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Fri, 19 Nov 2004 00:27:28 -0600
Received: from lamx25.havagreayday.com (66.63.182.25) by sc011pub.foobar.net (MailPass SMTP server v1.1.1 - 121803235448JY) with SMTP id <3-32004-215-32004-58673-27-1100845648> for mta005.foobar.net; Fri, 19 Nov 2004 00:27:29 -0600
From: Natural Beauty<[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Welcome Gifts from Yves Rocher Date: 19 Nov 2004 01:24:22 -0500
Message-Id: <[EMAIL PROTECTED]/peno>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="09845039450394qame.kjY-mkxGxhki/penoirmar"
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on Timmy
X-Spam-Level: **
X-Spam-Status: No, score=2.3 required=5.0 tests=BAYES_99,HTML_50_60,
HTML_MESSAGE,HTML_TEXT_AFTER_BODY,HTML_TEXT_AFTER_HTML,HTML_WEB_BUGS,
SARE_HTML_P_JUSTIFY autolearn=no version=3.0.1
X-UID: Status: RO
X-Status: RC
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent:
--09845039450394qame.kjY-mkxGxhki/penoirmar Content-Type: text/plain; charset = "ISO-8859-1" Content-Transfer-Encoding: 8bit
next:
Return-Path: <[EMAIL PROTECTED]>
Received: from xxx.lt ([192.168.1.4]) by mta019.foobar.net
(InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
id <[EMAIL PROTECTED]>;
Thu, 18 Nov 2004 17:27:42 -0600
Received: from xxx.lt (211.230.54.86) by sc010pub.foobar.net (MailPass SMTP server v1.1.1 - 121803235448JY) with SMTP id <2-9271-77-9271-60461-1-1100820446> for mta019.foobar.net; Thu, 18 Nov 2004 17:27:43 -0600
Received: from 197.126.123.141 by smtp.leira.no;
Thu, 18 Nov 2004 23:29:34 +0000
Message-ID: <[EMAIL PROTECTED]>
From: "Brooke Corbett" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED]
Subject: Order Rolex or other Swiss watches online
Date: Thu, 18 Nov 2004 19:29:03 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on Timmy
X-Spam-Level: ****
X-Spam-Status: No, score=4.5 required=5.0 tests=BAYES_99,MSGID_DOLLARS autolearn=no version=3.0.1
X-UID: Status: RO
X-Status: RC
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent:
next:
Return-Path: <[EMAIL PROTECTED]>
Received: from lamx26.havagreatday.com ([192.168.1.3])
by mta013.foobar.net
(InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Thu, 18 Nov 2004 10:58:11 -0600
Received: from lamx26.havagreatday.com (66.63.182.26) by sc009pub.foobar.net (MailPass SMTP server v1.1.1 - 121803235448JY) with SMTP id <1-995-202-995-129387-4-1100797090> for mta013.foobar.net; Thu, 18 Nov 2004 10:58:11 -0600
From: Flourish<[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Control Blood Sugar Naturally
Date: 18 Nov 2004 11:57:49 -0500
Message-Id: <[EMAIL PROTECTED]/peno>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="09845039450394qame.kjY-mkxGxhki/penoirmar"
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on Timmy
X-Spam-Level: *
X-Spam-Status: No, score=1.9 required=5.0 tests=BAYES_99,HTML_MESSAGE,
NO_REAL_NAME autolearn=no version=3.0.1
X-UID: Status: RO
X-Status: RC
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent:
--09845039450394qame.kjY-mkxGxhki/penoirmar Content-Type: text/plain; charset = "ISO-8859-1" Content-Transfer-Encoding: 8bit
Rob,
What you might want to do is use fetchmail & MTA's content filter to pull down your mail so it processes it before it's delivered to a local mbox or maildir which you have your kmail check for inbound mail.
Using kmail to realtime check IMHO slow, especially since network checks these days are becoming more and more important. You can use SA RBL, URIBL, Razor, DCC, Pyzor checks and not wait for the mail to be opened by Kmail.
Tim
