On Wed, 23 Sep 2026, Tom Williams via users wrote:
On 9/23/26 6:58 PM, John Hardin wrote:
On Wed, 23 Sep 2026, Mark London wrote:
I received an email that only has URLs that start with
https://storage.googleapis.com/. Can I consider this spam?
Any such that I have received in spams are recorded in
URI_GOOG_STO_SPAMMY, which gets a high score.
What would be considered a "high score" for this rule? This is my first time
hearing about it and I just looked, and in my SpamAssassin installation, it
has a score of 1.
Oops. I saw the 3.5 points override in the manual scores file but missed
that it was commented out.
Since it's specific to ones I have seen, its masscheck evaluation will
vary over time.
There is a non-specific google storage rule, GOOG_STO_NOIMG_HTML, which is
scored higher.
You can use __URI_GOOG_STO_EMAIL, __URI_GOOG_STO_HTML and
__URI_GOOG_STO_IMG in local rules.
If you send me spamples I can update the spammy list and
evaluate combinations.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
All I could think about was this bear is so close to me I can
see its teeth. I could have kissed it. I wished I had a gun.
-- Alyson Jones-Robinson
-----------------------------------------------------------------------
3 days until the 85th anniversary of the massacre at Babi Yar
Disarmament enables genocide - Registration enables disarmament
