Reglas spamassassin de usuario

Sistema de Soporte » Manuales y Preguntas Frecuentes ( FAQ ) » Reglas spamassassin de usuario

Login

[Recuperar contraseña]

Buscar

Opciones de Articulo

Agregar Comentario

Imprimir Articulo

Versión en PDF

Enviar Articulo por Email

Agregar a Favoritos

	Reglas spamassassin de usuario

Respuesta http://www.real-world-systems.com/mail/user_prefs.cgi

# customised scores for some tests below.
# list of tests and their default score:
# http://spamassassin.apache.org/tests.html .
#
#### cPanel will sort these!(not nice!)
# and doesn't work correctly ayway so DONT use cPanel to update this
# scores with fractional part of .7 stickout as DGG's
# interestingly only some of the keywords here are used by the cPanel/exim interface:
# required_score is, rewrite_header is not, report_contct & hostname are,

required_score 4.7

#ewrite_header subject [SPAM] # this is from /etc/mail/spamassassin/local.cf (showstuff.cgi)
rewrite_header subject [ALL]
add_header all report _REPORT_
add_header all testscores _TESTSSCORES(,)_

blacklist_from thespammer@everywhere.com
whitelist_from hall@aecom.yu.edu
whitelist_from *@hostingservicesinc.net
whitelist_from mberry@midphase.com

#eport_contact Postmaster@Real-World-Systems.com stops at # "don't you ever check!"
#eport_contact Postmaster&\#x40;Real-World-Systems.com this works, but displays as postmaster@Real-... not as intended
report_contact spamMaster@Real-World-Systems.com
report_hostname Real-World-Systems.com

# after reviewing /home/realger1/mail/filtered/spam/new the following scores are being used! #10/17/10 esc171
#content based:
score SUBJ_DOLLARS 3.7 # was 1.4 Subject starts with dollar amount
score RCVD_IN_SORBS_DUL 2.7 # was 0.9 RBL: SORBS: sent directly from dynamic IP address

score ADVANCE_FEE_1 4.7 # was 0.0 Appears to be advance fee fraud (Nigerian 419)
score ADVANCE_FEE_2 4.7 # was 1.2
score ADVANCE_FEE_3 4.7 # was 1.4
score ADVANCE_FEE_4 4.7 # was 1.4
score BAD_CREDIT 5.7 # was 0 bays may give -
score BAYES_50 1.7 # was 0
score BODY_ENHANCEMENT 3.7 # was .3
score FS_ERECTION 3.7 # was 2.6
score DRUGS_ERECTILE 3.7 # was .3
score DRUG_ED_SILD 3.7 # was .3 BODY: Talks about an E.D. drug using its chemical na
score FS_WEIGHT_LOSS 3.7 # was 1
score DIET_1 3.7 # was 1.2
score IMPOTENCE 3.7 # was 1.1
score DEAR_WINNER 3.7 # was 3.2 DEAR_WINNER
score KAM_LOTTO1 4.7 # was 0 , was 2.7 big story got big -
score KAM_LOTTO2 3.7 # was 0 , was 2.7 big story got big -
score KAM_LOTTO3 2.7 # was 0
score MILLION_USD 3.7 # was 1.5
score NA_DOLLARS 3.79 # was 1.3 BODY: Talks about a million North American dollars
score FB_GET_MEDS 2.7 # was .8
score ONLINE_PHARMACY 3.7 # was 0
score US_DOLLARS_3 4.7 # was 0.6
score SUBJ_BUY 2.7 # was 0.0 Subject line starts with Buy or Buying
score LOW_PRICE 2.7 # was 0.0 BODY: Lowest Price
score STOX_REPLY_TYPE 2.7 # was 0.0
score BODY_ENHANCEMENT2 3.7 # was 0.0 : Information on getting larger body parts

score SUBJ_ALL_CAPS 3.1 # was 2.1 ++++ Careful
score PLING_QUERY 3.7 # was 1.4 Subject has exclamation mark and question mark
score MIME_QP_LONG_LINE 3.7 # was 1.4 RAW: Quoted-printable line longer than 76 chars
#1.1 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different ((SHould this be higher??))
#2.5 STRONG_BUY BODY: Tells you about a strong buy
# 2.9 SUSPICIOUS_RECIPS Similar addresses in recipient list
# 0.1 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to background
#following group all occured in one message, sould any be higher score>
# 1.0 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
# 0.0 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
# 2.1 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
# 2.8 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should
# 0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
# 0.8 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
#
# 1 occurance : 0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
# 3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

#header based
#?? #0.6 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
#2.8 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should ((show this be higher)
score CORRUPT_FROM_LINE_IN_HDRS 2.7 # was 0.0 Informational: message is corrupt, with a From line in its headers
score NO_HEADERS_MESSAGE 1.7 # was 0.0 Message appears to be missing most RFC-822 headers

score SPF_FAIL 4.7 # was 0.7 SPF: sender does not match SPF record (fail)
score DNS_FROM_DOB 4.7 # was 0.7 RBL: Sender from new domain (Day Old Bread)
score RCVD_IN_DOB 4.7 # was 1.1 RBL: Received via relay in new domain (Day Old Bread)
score TO_CC_NONE 2.7 # was 0.1 No To: or Cc: header
score TO_MALFORMED 2.7 # was 1.2 To: has a malformed address
score DNS_FROM_RFC_BOGUSMX 3.7 # was 1.5 RBL: Envelope sender in bogusmx.rfc-ignorant.org
score TVD_RCVD_IP 3.7 # was 1.9 ??
score FORGED_YAHOO_RCVD 3.7 # was 2.3 'From' yahoo.com does not match 'Received' headers
score FORGED_OUTLOOK_HTML 2.7 # was 0
score FORGED_OUTLOOK_TAGS 2.7 # was 0
score HS_INDEX_PARAM 2.7 # was 0 URI: Link contains a common tracker pattern.
score HTML_SHORT_LINK_IMG_3 1.7 # was 0 like some of my own!
score MISSING_DATE 3.7 # was 0
score MISSING_HEADERS 5.7 # bays and SPF may give -
score MISSING_SUBJECT 1.7 # was 1.8 Missing Subject: header (spam never leaves out subject but people do
score MISSING_MID 3.7 # was 0
score NORMAL_HTTP_TO_IP 2.7 # was 0
score SPF_PASS -2.7 # was -0.0 SPF: sender matches SPF record
score RCVD_IN_XBL 5.7 # was 3.0 RBL: Received via a relay in Spamhaus XBL
score RCVD_IN_BL_SPAMCOP_NET 5.7 # was 5
score RCVD_IN_SBL 5.7 # was 1.6
score RCVD_IN_SORBS_WEB 5.7 # was .6
score RCVD_IN_NJABL_SPAM 5.7 # was 2.1 BL: NJABL: sender is confirmed spam source
score RCVD_IN_NJABL_RELAY 5.7 # was
score URIBL_AB_SURBL 5.7 # was 1.9
score URIBL_JP_SURBL 5.7 # was 1.5
score URIBL_OB_SURBL 5.7 # was 1.5
score URIBL_PH_SURBL 5.7 # was 1.5
score URIBL_SC_SURBL 5.7 # was 1.5
score URIBL_WS_SURBL 5.7 # was 1.5
score URIBL_BLACK 5.7 # was 2
score URIBL_RHS_DOB 5.7 # was 1.2
score URIBL_SBL 3.7 # was 1.5
score DNS_FROM_OPENWHOIS 3.7 # was 1.1 : Envelope sender listed in bl.open-whois.org
score FH_HELO_EQ_D_D_D_D 5.7 # was 0.0 Helo is d-d-d-d
score RDNS_DYNAMIC 1.7 # was 0.1 Delivered to trusted network by host with dynamic-looking rDNS
score RDNS_NONE 3.7 # was 2.7,,,0.1 Delivered to trusted network by a host with no rDNS
# more ?? 1.4 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
score DNS_FROM_RFC_WHOIS 2.7 # was 1.4 RBL: Envelope sender in whois.rfc-ignorant.org
score HELO_DYNAMIC_DHCP 2.7 # was 1.4 Relay HELO'd using suspicious hostname (DHCP)
score UNPARSEABLE_RELAY 5.7 # was 0.0 Informational: message has unparseable relay lines
score MISSING_MIMEOLE 2.7 # was 0.0 Message has X-MSMail-Priority, but no X-MimeOLE
#score -1.0 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust what????
whitelist_from hammer@anywhere.com

Detalles del Articulo

Código del Articulo:

486

Fecha de Creación:

15 Feb 2011 04:38 PM

Esta respuesta me fue util

Esta respuesta no me fue util

Volver