You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Rodney Richison <Ro...@rcrcomputing.com> on 2006/12/24 16:14:59 UTC
Yahoo groups
In my fight against spam, yahoo groups seems to be the only casualty.
I'm not a rule writer, so please forgive this feable attempt and let me
know if it looks ok????
# Example of a rule for text in the header of the mail:
header LOCAL__H_from_yahoogroups From =~ /yahoogroups\.com/i
score LOCAL__H_from_yahoogroups -2.0
describe LOCAL__H_from_yahoogroups From yahoogroups.com
Highest Regards,
Rodney Richison
RCR Computing
PO Box 566 - 118 N. Broadway
Cleveland, OK 74020
Phone: 918-358-1111
Proud ChannelVar member!
www.ChannelVar.com
Re: Yahoo groups
Posted by mouss <us...@free.fr>.
Rodney Richison wrote:
> In my fight against spam, yahoo groups seems to be the only casualty.
> I'm not a rule writer, so please forgive this feable attempt and let me
> know if it looks ok????
>
> # Example of a rule for text in the header of the mail:
> header LOCAL__H_from_yahoogroups From =~ /yahoogroups\.com/i
> score LOCAL__H_from_yahoogroups -2.0
> describe LOCAL__H_from_yahoogroups From yahoogroups.com
>
>
This matches
From: yahoogroups.com@spammer.example
you can play with other headers such as Sender, List-Id, ... etc, but
all these can be forged.
if these are to be trusted, look at whitelist_rcvd_from. Note that
yahoogroups mail have a domain key signature.
Re: Yahoo groups
Posted by jdow <jd...@earthlink.net>.
I have custom rules for the individual groups. Some are cleaner than
others. The rule scores range from -10 for the clean groups to +2 for
the dirty ones.
header UHS_MMSSTV Subject =~ /\[MM-SSTV\]/i
describe UHS_MMSSTV MMSSTV is not always nice
score UHS_MMSSTV 2.0
That's an example of a not always clean one. Clean messages hit BAYES_0
most of the time. So even with a +2 on the group it VERY seldom false
alarms. Other groups get a high a negative score as -10 when it is known
they are squeaky clean. (GoogleGroups is another kettle of Bandini(tm).
Note that Bandini(tm) is "The word for fertilizer.")
Your rule would work except that messages from mailinglists on YahooGroups
are never from yahoogroups.com. But it might let more than a little garbage
through. "Sender" as a replacement for "From" might trigger a trifle more
often unless you are looking for subscription feedback messages. Those have
>From lines with stuff like: XXX=ZZZZlink.net@yahoogroups.com. You can at
least trap on the <domain>@yahoogroups.com part.
Read the headers for what you want to capture. Don't guess. It's like
guessing a password.
{^_^}
----- Original Message -----
From: "Rodney Richison" <Ro...@rcrcomputing.com>
In my fight against spam, yahoo groups seems to be the only casualty.
I'm not a rule writer, so please forgive this feable attempt and let me
know if it looks ok????
# Example of a rule for text in the header of the mail:
header LOCAL__H_from_yahoogroups From =~ /yahoogroups\.com/i
score LOCAL__H_from_yahoogroups -2.0
describe LOCAL__H_from_yahoogroups From yahoogroups.com
Highest Regards,
Rodney Richison
RCR Computing
PO Box 566 - 118 N. Broadway
Cleveland, OK 74020
Phone: 918-358-1111
Proud ChannelVar member!
www.ChannelVar.com