Question, how can we avoid tagging messages that are sent to our server from
a remote connection if they use authenticated SMTP ??
Example: I have a user who is on a different network, using my mail server,
so I let them via authenticated SMTP, every message they send gets tagged
because of Bot Net or Relay Checker..
Thanks, Billy
----- Original Message -----
From: "decoder" <[EMAIL PROTECTED]>
To: "John Rudd" <[EMAIL PROTECTED]>
Cc: <users@spamassassin.apache.org>
Sent: Friday, December 08, 2006 5:03 AM
Subject: Re: Botnet 0.6 plugin for Spam Assassin availabile
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
John Rudd wrote:
Michael Schaap wrote:
John Rudd wrote:
The next version of the Botnet plugin for Spam Assassin is
ready. The install instructions are in the Botnet.txt file, and
in the INSTALL file.
Great work!
To Do before 1.0:
(...)
There's another thing that would be really nice to have. You
know how the DNS rules' descriptions specify what actually
matches? e.g.:
3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus
XBL [12.34.56.789 listed in sbl-xbl.spamhaus.org] 1.6 URIBL_SBL
Contains an URL listed in the SBL blocklist [URIs: example.com]
It would be great if Botnet could do something similar, like:
2.0 BOTNET The submitting mail server looks like
part of a Botnet [ip=12.34.56.789 rdns=dhcp12.34.example.org]
Any tips on how to do that? :-}
Have a look at the FuzzyOcr plugin, especially on Scoring.pm in the
SVN, found here:
http://fuzzyocr.own-hero.net/browser/trunk/devel/FuzzyOcr/Scoring.pm
In each of the functions, the mail is scored with a different rule, a
custom score and a custom description which is generated there.
That should be enough for you to reproduce that :)
Chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFeTiMJQIKXnJyDxURAicaAJ9n5XdSIpvWXrz3W4w2DtKmbiQ82ACgvyAB
ywuRctN/qak0u61idiMFw5o=
=obGb
-----END PGP SIGNATURE-----
