You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris <cp...@embarqmail.com> on 2008/05/17 03:25:40 UTC
spammytokens
I'm using the add_header template "add_header all Spammy
_SPAMMYTOKENS(2,long)_". Lately on messages that FetchYahoo picks up from my
Yahoo account the below has started to show up. FetchYahoo adds its own X-
header "X-FetchYahoo: version 2.12.0alpha3 MsgId
1_20599_AIYmvs4AAMP3SC4qMwQtqyEPKYs" at the end of each message but I don't
see how or why its being picked up by SA.
X-Spam-Spammy: 1.000-4--0h-102s--0d--HX-FetchYahoo:2.12.0alpha3,
1.000-2--0h-57s--0d--941207361
Below are all the add_header templates I'm using in
my /etc/mail/spamassassin/local.cf file. I'm not using a
~/.spamassassin/user_prefs file.
add_header all Token Summary _TOKENSUMMARY_
add_header all Spammy _SPAMMYTOKENS(2,long)_
add_header all Hammy _HAMMYTOKENS(2,long)_
add_header all Date of Scan _DATE_
add_header all DCC _DCCB_ _DCCR_
add_header all Pyzor _PYZOR_
add_header all Remote Host _REMOTEHOSTNAME_
add_header all Remote Host Addr _REMOTEHOSTADDR_
add_header all Trusted Relays _RELAYSTRUSTED_
add_header all Untrusted Relays _RELAYSUNTRUSTED_
add_header all External Relays _RELAYSEXTERNAL_
add_header all Last External IP _LASTEXTERNALIP_
add_header all Last External RDNS _LASTEXTERNALRDNS_
add_header all Last External HELO _LASTEXTERNALHELO_
add_header all Subtest Ran _SUBTESTS(,)_
add_header all RBL Results _RBL_
add_header all Status _YESNO_, score=_SCORE_ required=_REQD_
tests=_TESTSSCORES_ autolearn=_AUTOLEARN_ version=_VERSION_
Any enlightnment would be appreciated.
Chris
--
Chris
KeyID 0xE372A7DA98E6705C
Re: spammytokens
Posted by Chris <cp...@embarqmail.com>.
On Saturday 17 May 2008 10:03 am, Karsten Bräckelmann wrote:
> On Fri, 2008-05-16 at 20:25 -0500, Chris wrote:
> > I'm using the add_header template "add_header all Spammy
> > _SPAMMYTOKENS(2,long)_". Lately on messages that FetchYahoo picks up from
> > my Yahoo account the below has started to show up. FetchYahoo adds its
> > own X- header "X-FetchYahoo: version 2.12.0alpha3 MsgId
> > 1_20599_AIYmvs4AAMP3SC4qMwQtqyEPKYs" at the end of each message but I
> > don't see how or why its being picked up by SA.
>
> I don't understand that question. Bayes uses both, body tokens as well
> as header tokens. So that would be why, and how Bayes picks up those
> headers.
>
> Apparently, you are getting (much?) more spam than ham via that Yahoo
> account. According to Bayes, that header turns into a spammy sign, and
> if there are no stronger tokens, this one will show up.
Thats all I get in my Yahoo account, though I've been using FetchYahoo for a
few years now I guess the amount of spam has finally turned the tide as far
as spammy tokens go.
>
> > X-Spam-Spammy: 1.000-4--0h-102s--0d--HX-FetchYahoo:2.12.0alpha3,
> > 1.000-2--0h-57s--0d--941207361
>
> bayes_ignore_header X-FetchYahoo
>
> See the docs [1] for a more verbose explanation of bayes_ignore_header,
> but AFAICT this has been designed especially for cases like this.
>
> guenther -- who know he shouldn't post before he had his coffee
>
>
> [1]
> http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html#l
>earning_options
Thanks Karsten, exactly what I've been looking for. I didn't realize it but I
already had quite a few bayes_ignore_header settings:
bayes_ignore_header ReSent-Date
bayes_ignore_header ReSent-From
bayes_ignore_header ReSent-Message-ID
bayes_ignore_header ReSent-Subject
bayes_ignore_header ReSent-To
bayes_ignore_header Resent-Date
bayes_ignore_header Resent-From
I just added X-FetchYahoo to it and will see what happens.
--
Chris
KeyID 0xE372A7DA98E6705C
Re: spammytokens
Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Fri, 2008-05-16 at 20:25 -0500, Chris wrote:
> I'm using the add_header template "add_header all Spammy
> _SPAMMYTOKENS(2,long)_". Lately on messages that FetchYahoo picks up from my
> Yahoo account the below has started to show up. FetchYahoo adds its own X-
> header "X-FetchYahoo: version 2.12.0alpha3 MsgId
> 1_20599_AIYmvs4AAMP3SC4qMwQtqyEPKYs" at the end of each message but I don't
> see how or why its being picked up by SA.
I don't understand that question. Bayes uses both, body tokens as well
as header tokens. So that would be why, and how Bayes picks up those
headers.
Apparently, you are getting (much?) more spam than ham via that Yahoo
account. According to Bayes, that header turns into a spammy sign, and
if there are no stronger tokens, this one will show up.
> X-Spam-Spammy: 1.000-4--0h-102s--0d--HX-FetchYahoo:2.12.0alpha3,
> 1.000-2--0h-57s--0d--941207361
bayes_ignore_header X-FetchYahoo
See the docs [1] for a more verbose explanation of bayes_ignore_header,
but AFAICT this has been designed especially for cases like this.
guenther -- who know he shouldn't post before he had his coffee
[1] http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html#learning_options
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}