You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Ron McKeating <R....@lboro.ac.uk> on 2005/04/07 11:23:24 UTC

Rule-sets

Thanks to all of you who replied about the job offer spams. Could
anybody point at the best site for the latest rulesets and an
explanation of what each one does.

Ron
-- 
Ron McKeating
Senior IT Services Specialist
Computing Services
Loughborough University
01509 222329


Re: Rule-sets

Posted by Matt Kettler <mk...@comcast.net>.
At 05:53 AM 4/7/2005, Matthew Newton wrote:
>The "main" site for rules is generally http://www.rulesemporium.com/,
>and spefically the http://www.rulesemporium.com/rules.htm page. They
>have descriptions for what they do. You'll also find more on
>http://www.exit0.us/, including the RulesDuJour script at
>http://www.exit0.us/index.php?pagename=RulesDuJour that will
>automatically check for new rules for you.

Don't forget the list of rulesets in the official Wiki:

http://wiki.apache.org/spamassassin/CustomRulesets

Really, I would regard the wiki page as the best starting page, as it 
references all the others, including exit0 and rulesemporium.

Rulesemporium is the outlet for all the rules built up by SARE, who do by 
far make the most and best add-on rules, but they aren't the only ones..



Re: Rule-sets

Posted by Matthew Newton <mc...@leicester.ac.uk>.
On Thu, Apr 07, 2005 at 11:00:52AM +0100, Ron McKeating wrote:
> On Thu, 2005-04-07 at 10:53 +0100, Matthew Newton wrote:
> > Ron,
> > 
> > On Thu, Apr 07, 2005 at 10:23:24AM +0100, Ron McKeating wrote:
> > > Thanks to all of you who replied about the job offer spams. Could
> > > anybody point at the best site for the latest rulesets and an
> > > explanation of what each one does.
> > 
> > The "main" site for rules is generally http://www.rulesemporium.com/,
> > and spefically the http://www.rulesemporium.com/rules.htm page. They
> > have descriptions for what they do. You'll also find more on
> > http://www.exit0.us/, including the RulesDuJour script at
> > http://www.exit0.us/index.php?pagename=RulesDuJour that will
> > automatically check for new rules for you.
> > 
> > I can send you the current RulesDuJour settings I am using, if you like,
> > assuming you are not already using it. You should check it yourself and
> > make sure you are happy with the rules yourself, though.
> > 
> > I still find that there are some spam messages that don't seem to be
> > covered by rules, so end up writing my own. I'm no expert, but basic
> > rule-writing isn't that hard if you can write regular expressions.
> > 
> > Matthew
> > 
> 
> Thanks to all the replied, we have rules_du_jour and I am now getting an
> idea of how it works. I suppose the obvious question is has anybody
> written a good howto on writing your own rules. And if so where is it?

http://wiki.apache.org/spamassassin/WritingRules is good. Remember to
run "spamassassin --lint" before restarting SA to make sure you haven't
made any errors. I usually score my rules with 0.1 first to see how
messages are hitting them, and then increase after a few days.

http://www.exit0.us/index.php?pagename=RulesBasics may also be useful.

The most confusing thing I originally found was the difference between
body, rawbody and raw. The exit0.us page above seems to explain that
fairly well.

Matthew


-- 
Matthew Newton <mc...@le.ac.uk>

UNIX and e-mail Systems Administrator, Network Support Section,
Computer Centre, University of Leicester,
Leicester LE1 7RH, United Kingdom

Re: Rule-sets

Posted by Ron McKeating <R....@lboro.ac.uk>.
On Thu, 2005-04-07 at 10:53 +0100, Matthew Newton wrote:
> Ron,
> 
> On Thu, Apr 07, 2005 at 10:23:24AM +0100, Ron McKeating wrote:
> > Thanks to all of you who replied about the job offer spams. Could
> > anybody point at the best site for the latest rulesets and an
> > explanation of what each one does.
> 
> The "main" site for rules is generally http://www.rulesemporium.com/,
> and spefically the http://www.rulesemporium.com/rules.htm page. They
> have descriptions for what they do. You'll also find more on
> http://www.exit0.us/, including the RulesDuJour script at
> http://www.exit0.us/index.php?pagename=RulesDuJour that will
> automatically check for new rules for you.
> 
> I can send you the current RulesDuJour settings I am using, if you like,
> assuming you are not already using it. You should check it yourself and
> make sure you are happy with the rules yourself, though.
> 
> I still find that there are some spam messages that don't seem to be
> covered by rules, so end up writing my own. I'm no expert, but basic
> rule-writing isn't that hard if you can write regular expressions.
> 
> Matthew
> 

Thanks to all the replied, we have rules_du_jour and I am now getting an
idea of how it works. I suppose the obvious question is has anybody
written a good howto on writing your own rules. And if so where is it?

Ron
> 
-- 
Ron McKeating
Senior IT Services Specialist
Computing Services
Loughborough University
01509 222329


Re: Rule-sets

Posted by Matthew Newton <mc...@leicester.ac.uk>.
Ron,

On Thu, Apr 07, 2005 at 10:23:24AM +0100, Ron McKeating wrote:
> Thanks to all of you who replied about the job offer spams. Could
> anybody point at the best site for the latest rulesets and an
> explanation of what each one does.

The "main" site for rules is generally http://www.rulesemporium.com/,
and spefically the http://www.rulesemporium.com/rules.htm page. They
have descriptions for what they do. You'll also find more on
http://www.exit0.us/, including the RulesDuJour script at
http://www.exit0.us/index.php?pagename=RulesDuJour that will
automatically check for new rules for you.

I can send you the current RulesDuJour settings I am using, if you like,
assuming you are not already using it. You should check it yourself and
make sure you are happy with the rules yourself, though.

I still find that there are some spam messages that don't seem to be
covered by rules, so end up writing my own. I'm no expert, but basic
rule-writing isn't that hard if you can write regular expressions.

Matthew


-- 
Matthew Newton <mc...@le.ac.uk>

UNIX and e-mail Systems Administrator, Network Support Section,
Computer Centre, University of Leicester,
Leicester LE1 7RH, United Kingdom