add a slew of rules to handle automatic response backscatter in partial resultion...

[spamassassin_config.git] / common / auto_response_spam

diff --git a/common/auto_response_spam b/common/auto_response_spam
new file mode 100644 (file)
index 0000000..f999fca
--- /dev/null
+++ b/common/auto_response_spam
@@ -0,0 +1,79 @@
+# -*- mode: spamassassin -*-
+
+## This file contains rules which match various automatic responders
+## which give us backscatter. The scores here are best guesses; and
+## may need to be overridden for recipients which actually want these
+## bounces.
+
+# don 2009-02-05
+body  QMAILBOUNCE      /This\s*is\s*the\s*qmail-send\s*program/i
+describe QMAILBOUNCE   Stupid qmail bounces; we don't want them
+score QMAILBOUNCE      2
+
+# don 2009-02-05 (the following are all for various stupid auto-repsonse things)
+header RECEIVEDMAIL    subject =~ /received\s*your\s*mail/i
+describe RECEIVEDMAIL  It's great that you've received our mail; we don't care
+score RECEIVEDMAIL     4
+
+header YOURMESSAGE     subject =~ /your message/i
+describe YOURMESSAGE   It's great that our message did something; we don't care
+score YOURMESSAGE      2.5
+
+body  NOTPROCBOUNCE    /was not processed by our system/i
+describe NOTPROCBOUNCE Bounce by system that was not processed
+score NOTPROCBOUNCE    2
+
+body ACCOUNTNOTEXIST   /account\s+\S+\s+(does\s*not|doesn't)\s*exist/
+describe ACCOUNTNOTEXIST       It's not our problem if an account doesn't eixst
+score ACCOUNTNOTEXIST          2
+
+body CR_SYSTEM1                /sent by a human and not a computer/i
+describe CR_SYSTEM1    Looks like a challenge/response system
+score CR_SYSTEM1       2
+
+body CR_SYSTEM2                /do not reply/i
+describe CR_SYSTEM2    Body contains do not reply; likely a CR system
+score CR_SYSTEM2       1.5
+
+body CR_SYSTEM3                /confirm this request/i
+describe CR_SYSTEM3    Body contains confirm this request; likely a CR system
+score CR_SYSTEM3       1.5
+
+header CR_SYSTEM4      subject =~ /challenge.*response/i
+describe CR_SYSTEM4    Subject contains challenge/response
+score CR_SYSTEM4       3
+
+body CR_SYSTEM5                /confirmation of list posting/i
+describe CR_SYSTEM5    Body asks us to confirm a list posting
+score CR_SYSTEM5       3
+
+header CR_SYSTEM6      subject =~ /^confirm\:/i
+describe CR_SYSTEM6    Subject asks us to confirm something; we don't want to
+score CR_SYSTEM6       2
+
+body SUPPORTMAIL1      /assigned a ticket/
+describe SUPPORTMAIL1  Message from an automated support/response system
+score SUPPORTMAIL1     2
+
+header SUPPORTMAIL2    subject =~ /^\[*(?:update\s*to\s*)?ticket/
+describe SUPPORTMAIL2  Message with ticket leading it; probably a support mail
+score SUPPORTMAIL2     1.5
+
+body SUPPORTMAIL3      /the email address \S+ is not registered/i
+describe SUPORTMAIL3   We don't care if an e-mail address is not registered
+score SUPPORTMAIL3     1.5
+
+body SUPPORTMAIL4      /(reached an unmonitored e-mail address|no response will be given)/i
+describe SUPPORTMAIL4  Yeay for dumb auto-response bots that don't want a response
+score SUPPORTMAIL4     1.5
+
+header SUPPORTMAIL5    from =~ /\bsupport\@/i
+describe SUPPORTMAIL5  Message from an address that looks like support@
+score SUPPORTMAIL5     1.5
+
+
+header FROMAUTOREPLY   from =~ /(autoreply|no-?reply)/i
+describe FROMAUTOREPLY Message from an autoreplier or something who doesn't seem to want a reply
+score FROMAUTOREPLY    4
+
+