X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fauto_response_spam;h=d29d4f63adc2b4856f0fe791dcc77fc191886d9c;hp=3491e666573fb9217ae18537b8657db5921e3442;hb=1db9a6f410e64046dd0057c8db8795abc25a11fd;hpb=f644b7f6d288073ce683058bc0d1f31e3808f896 diff --git a/common/auto_response_spam b/common/auto_response_spam index 3491e66..d29d4f6 100644 --- a/common/auto_response_spam +++ b/common/auto_response_spam @@ -11,20 +11,40 @@ describe QMAILBOUNCE Stupid qmail bounces; we don't want them score QMAILBOUNCE 2 # don 2009-02-05 (the following are all for various stupid auto-repsonse things) -header RECEIVEDMAIL subject =~ /(?:received\s*your\s*mail|respuesta autom.tica)/i -describe RECEIVEDMAIL It's great that you've received our mail; we don't care +header RECEIVEDMAIL subject =~ /(?:received\s*your\s*mail|(?:respuesta|risposta|response) (?:autom.tica|automatic)|auto(?:matic|m.tica)?\s*(?:respuesta|risposta|response))/i +describe RECEIVEDMAIL It's great that you've received our mail and automatically responded. We don't care score RECEIVEDMAIL 4 +body AUTOREBOD /(?:received\s*your\s*mail|(?:(?:respuesta|risposta|response|message) auto(?:m.tica?|mated)?)|auto(?:m.tica?|mated)?\s*(?:respuesta|risposta|response|message))/i +describe AUTOREBOD It's great that you've automatically responded +score AUTOREBOD 4 + header YOURMESSAGE subject =~ /your message/i describe YOURMESSAGE It's great that our message did something; we don't care score YOURMESSAGE 2.5 +body YOURMESSAGEBOD /^Your message/i +describe YOURMESSAGEBOD It's great that our message did something; we don't care +score YOURMESSAGEBOD 2.5 + +body NODELIVERY /(?:could not be|has not been) delivered/i +describe NODELIVERY We don't care if it could be or has not been delivered +score NODELIVERY 1.5 + +body NORESEND /do not resend your original message/i +describe NORESEND If you don't want us to resend our message, why tell us? +score NORESEND 2 + +header PROOFPOINT from =~ /proofpoint/ +describe PROOFPOINT Automatic mail from proofpoint (some MTA thingie) +score PROOFPOINT 3.5 + body NOTPROCBOUNCE /was not processed by our system/i describe NOTPROCBOUNCE Bounce by system that was not processed score NOTPROCBOUNCE 2 -body ACCOUNTNOTEXIST /account\s+\S+\s+(does\s*not|doesn't)\s*exist/ -describe ACCOUNTNOTEXIST It's not our problem if an account doesn't eixst +body ACCOUNTNOTEXIST /(?:account\s+\S+\s+(does\s*not|doesn't)\s*exist|(?:invalid|not a valid) e-?mail address)/i +describe ACCOUNTNOTEXIST It's not our problem if an account doesn't exist score ACCOUNTNOTEXIST 2 body CR_SYSTEM1 /sent by a human and not a computer/i @@ -51,6 +71,14 @@ header CR_SYSTEM6 subject =~ /^confirm\:/i describe CR_SYSTEM6 Subject asks us to confirm something; we don't want to score CR_SYSTEM6 2 +header CR_SYSTEM7 x-cr-puzzleid =~ /./i +describe CR_SYSTEM7 Has a X-cr-puzzleid: header +score CR_SYSTEM7 5 + +body CR_SYSTEM8 /reply to this message/i +describe CR_SYSTEM8 Reply to this message? are you crazy? +score CR_SYSTEM8 3 + body SUPPORTMAIL1 /assigned a ticket/ describe SUPPORTMAIL1 Message from an automated support/response system score SUPPORTMAIL1 2 @@ -60,27 +88,53 @@ describe SUPPORTMAIL2 Message with ticket leading it; probably a support mail score SUPPORTMAIL2 1.5 body SUPPORTMAIL3 /the email address \S+ is not registered/i -describe SUPORTMAIL3 We don't care if an e-mail address is not registered +describe SUPPORTMAIL3 We don't care if an e-mail address is not registered score SUPPORTMAIL3 1.5 body SUPPORTMAIL4 /(reached an unmonitored e-mail address|no response will be given)/i describe SUPPORTMAIL4 Yeay for dumb auto-response bots that don't want a response score SUPPORTMAIL4 1.5 -header SUPPORTMAIL5 from =~ /\bsupport\@/i -describe SUPPORTMAIL5 Message from an address that looks like support@ -score SUPPORTMAIL5 1.5 +header SUPPORTMAIL5 from =~ /\b(?:support|info)\@/i +describe SUPPORTMAIL5 Message from an address that looks like support@ or info@ +score SUPPORTMAIL5 2 - -header FROMAUTOREPLY from =~ /(autoreply|no-?reply)/i +header FROMAUTOREPLY from =~ /(autoreply|no-?repl(?:y|ies))/i describe FROMAUTOREPLY Message from an autoreplier or something who doesn't seem to want a reply score FROMAUTOREPLY 4 header FROMABUSE from =~ /\babbuse\@/i describe FROMABUSE Message from abbuse@somedomain -score FROMEABUSE 1.5 +score FROMABUSE 1.5 + +header FROMSPAMCOP from =~ /spamcop\@/i +describe FROMSPAMCOP Message from spamcop@somedomain +score FROMSPAMCOP 3.5 -header SUBJECTSPAM subject =~ /\*\*\s*spam\s*\*\*/i -describe SUBJECTPSAM Subject contains **spam**, so it's probably spam +header SUBJECTSPAM subject =~ /(?:\*\*|\[)\s*spam\s*(?:\*\*|\])/i +describe SUBJECTSPAM Subject contains **spam** or [spam], so it's probably spam score SUBJECTSPAM 3.5 +header MESBLOCKED subject =~ /your message (?:is )?blocked/i +describe MESBLOCKED That's great that our message was blocked +score MESBLOCKED 2 + +header FAILDELIVERY subject =~ /failed to deliver/i +describe FAILDELIVERY Oh noes! You failed to deliver spam! +score FAILDELIVERY 2 + +header NEWADDRESS subject =~ /(?:new e-?mail address|deaktivierung der mailadresse)/i +describe NEWADDRESS We don't care that you have a new e-mail address +score NEWADDRESS 4 + +header VACATIONMAIL1 user-agent =~ /vacation/i +describe VACATIONMAIL1 Mail from the vacation user agent +score VACATIONMAIL1 0.1 + +header VACATIONMAIL2 X-Vacation =~ /./ +describe VACATIONMAIL2 Has an X-Vacation header +score VACATIONMAIL2 0.1 + +meta VACATIONMAIL (VACATIONMAIL1 || VACATIONMAIL2) +describe VACATIONMAIL Looks like a vacation message +score VACATIONMAIL 1 \ No newline at end of file