You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by qu...@apache.org on 2004/08/05 05:08:40 UTC
svn commit: rev 35714 - spamassassin/trunk/rules
Author: quinlan
Date: Wed Aug 4 20:08:40 2004
New Revision: 35714
Modified:
spamassassin/trunk/rules/20_dnsbl_tests.cf
spamassassin/trunk/rules/50_scores.cf
Log:
bug 3658: disable SenderBase
Modified: spamassassin/trunk/rules/20_dnsbl_tests.cf
==============================================================================
--- spamassassin/trunk/rules/20_dnsbl_tests.cf (original)
+++ spamassassin/trunk/rules/20_dnsbl_tests.cf Wed Aug 4 20:08:40 2004
@@ -210,22 +210,20 @@
describe RCVD_IN_BSP_OTHER Sender is in Bonded Sender Program (other relay)
tflags RCVD_IN_BSP_OTHER net nice
-# SenderBase provides information about senders
-# http://www.senderbase.org/dnsresponses.html
+# SenderBase information <http://www.senderbase.org/dnsresponses.html>
+# these are experimental example rules
+
# sa.senderbase.org for SpamAssassin queries
# query.senderbase.org for other queries
header __SENDERBASE eval:check_rbl_txt('sb', 'sa.senderbase.org.')
tflags __SENDERBASE net
-# S23 = domain daily magnitude
-# S25 = date of first message from this domain
+# S23 = domain daily magnitude, S25 = date of first message from this domain
header SB_NEW_BULK eval:check_rbl_sub('sb', 'sb:S23 > 6.2 && (time - S25 < 120*86400)')
describe SB_NEW_BULK Sender domain is new and very high volume
tflags SB_NEW_BULK net
-# S5 = category
-# S40 = IP daily magnitude
-# S41 = IP monthly magnitude
+# S5 = category, S40 = IP daily magnitude, S41 = IP monthly magnitude
# note: accounting for rounding, "> 0.3" means at least a 59% volume spike
header SB_NSP_VOLUME_SPIKE eval:check_rbl_sub('sb', 'sb:S5 =~ /NSP/ && S41 > 3.8 && S40 - S41 > 0.3')
describe SB_NSP_VOLUME_SPIKE Sender IP hosted at NSP has a volume spike
Modified: spamassassin/trunk/rules/50_scores.cf
==============================================================================
--- spamassassin/trunk/rules/50_scores.cf (original)
+++ spamassassin/trunk/rules/50_scores.cf Wed Aug 4 20:08:40 2004
@@ -791,8 +791,6 @@
score DNS_FROM_RFC_BOGUSMX 0 1.099 0 1.701
score DNS_FROM_RFC_POST 0 1.470 0 0.687
score DNS_FROM_RFC_WHOIS 0 0.502 0 0.001
-score SB_NEW_BULK 0 0.724 0 0.690
-score SB_NSP_VOLUME_SPIKE 0 0.662 0 0.255
score URIBL_SBL 0 0.765 0 1.723
score URIBL_SC_SURBL 0 3.831 0 3.752
score URIBL_WS_SURBL 0 0.652 0 1.823
@@ -856,6 +854,11 @@
# Habeas: http://www.habeas.com/
score HABEAS_INFRINGER 0 16.0 0 16.0
score HABEAS_USER 0 -8.0 0 -8.0
+
+# SenderBase -- experimental
+score __SENDERBASE 0
+score SB_NEW_BULK 0
+score SB_NSP_VOLUME_SPIKE 0
# Hashcash
ifplugin Mail::SpamAssassin::Plugin::Hashcash