I posted this yesterday for those wanting an SA rule, here: header PW_IS_BAD_TLD From =~ /\.pw\b/ describe PW_IS_BAD_TLD PW TLD ABUSE score PW_IS_BAD_TLD 3 Change score to whatever you want. Enjoy.
--Chris > -----Original Message----- > From: Michael Orlitzky [mailto:mich...@orlitzky.com] > Sent: 2013-05-08 11:24 > To: users@spamassassin.apache.org > Subject: Re: .pw / Palau URL domains in spam > > > (replying randomly in the thread) > > We've been getting complaints about these, so while I don't like to > target a TLD indiscriminately, I think I'd like to add a few points to > mail from *.pw for a couple of months until things clear up. > > What's the correct way to do this? A regexp on the from/return-path > headers? Or is something built-in? >