From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: X-Spam-Status: No, score=-1.5 required=3.0 tests=ALL_TRUSTED,AWL,BAYES_00, JUSTAMAILBOX shortcircuit=no autolearn=no autolearn_force=no version=3.4.0 Received: from localhost (dcvr.yhbt.net [127.0.0.1]) by dcvr.yhbt.net (Postfix) with ESMTP id 46393201CF for ; Sun, 7 May 2017 10:54:19 +0000 (UTC) From: Eric Wong To: meta@public-inbox.org Subject: [PATCH] spamassassin: update example ~/.spamassassin/user_prefs file Date: Sun, 7 May 2017 10:54:19 +0000 Message-Id: <20170507105419.12548-1-e@80x24.org> List-Id: This is closer to what I run on the public-inbox.org servers. --- sa_config/user/.spamassassin/user_prefs | 57 +++++++++++++++++++++++++++++++-- 1 file changed, 55 insertions(+), 2 deletions(-) diff --git a/sa_config/user/.spamassassin/user_prefs b/sa_config/user/.spamassassin/user_prefs index 70e1291..9c3bb16 100644 --- a/sa_config/user/.spamassassin/user_prefs +++ b/sa_config/user/.spamassassin/user_prefs @@ -44,11 +44,21 @@ body JUSTAMAILBOX /I'm just a mailbox used for sending notifications/ describe JUSTAMAILBOX "autoreply phrase" score JUSTAMAILBOX 5.0 +# hello foo +header PI_HELLO subject =~ /^hello \w+/i +describe PI_HELLO "Hello foo" +score PI_HELLO 3 + # no delivery header PI_DNOT subject =~ /delivery\s+(?:status\s+)?notification/i describe PI_DNOT "delivery notification" score PI_DNOT 3 +# no delivery +header PI_PARCEL subject =~ /could not deliver your parcel/ +describe PI_PARCEL "delivery notification" +score PI_PARCEL 3 + # notice to appear header PI_DNOTICE subject =~ /notice to appear/i describe PI_DNOTICE "notice to appear" @@ -56,12 +66,55 @@ score PI_DNOTICE 3 full ZIPFILE /\b(?:file)?name\=.*\.zip\b/i describe ZIPFILE zipfile attachment -score ZIPFILE 0.5 +score ZIPFILE 1.5 + +header PI_NUM_WORD_SUBJ subject =~ /^\d+ [a-z0-9_-]+$/ +describe PI_NUM_WORD_SUBJ "number and single word subject" +score PI_NUM_WORD_SUBJ 0.5 + +header PI_NUM_ONLY_SUBJ subject =~ /^\d+$/ +describe PI_NUM_ONLY_SUBJ "number only subject" +score PI_NUM_ONLY_SUBJ 0.5 + +header PI_IMPORTANCE_HIGH importance =~ /^high$/ +describe PI_IMPORTANCE_HIGH "importance: high header" +score PI_IMPORTANCE_HIGH 0.5 + +meta PI_ZIPFILE_NUM_WORD_SUBJ PI_NUM_WORD_SUBJ && ZIPFILE +describe PI_ZIPFILE_NUM_WORD_SUBJ "common spam/virus pattern" +score PI_ZIPFILE_NUM_WORD_SUBJ 3 + +meta PI_ZIPFILE_NUM_ONLY_SUBJ PI_NUM_ONLY_SUBJ && ZIPFILE +describe PI_ZIPFILE_NUM_ONLY_SUBJ "common spam/virus pattern" +score PI_ZIPFILE_NUM_ONLY_SUBJ 3 + +full DOCFILE /\b(?:file)?name\=.*\.doc\b/i +describe DOCFILE doc attachment +score DOCFILE 3 score BAYES_999 3 score BAYES_05 -1.5 -score BAYES_00 -15 +score BAYES_00 -3 # trust paid whitelist services? never score RCVD_IN_RP_SAFE 0.0 score RCVD_IN_RP_CERTIFIED 0.0 + +# this depends on PublicInbox::SaPlugin::ListMirror: +# header LIST_MIRROR_RECEIVED eval:check_list_mirror_received() +# describe LIST_MIRROR_RECEIVED Received does not match trusted list server +# score LIST_MIRROR_RECEIVED 10 +# +# this depends on PublicInbox::SaPlugin::ListMirror: +# header LIST_MIRROR_BCC eval:check_list_mirror_bcc() +# describe LIST_MIRROR_BCC Mailing list was Bcc-ed +# score LIST_MIRROR_BCC 10 + +# list_mirror X-Mailing-List git@vger.kernel.org *.kernel.org git@vger.kernel.org + +# DNSWL scores is a bit too powerful by default (-5 adjustment!) +# default score RCVD_IN_DNSWL_LOW 0 -0.7 0 -0.7 +# default score RCVD_IN_DNSWL_MED 0 -2.3 0 -2.3 +# default score RCVD_IN_DNSWL_HI 0 -5 0 -5 +score RCVD_IN_DNSWL_MED 0 -0.1 0 -0.1 +score RCVD_IN_DNSWL_HI 0 -0.2 0 -0.2 -- EW