X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Flist_specific;h=664adb0cbdf6a224de63382bb957b492978ce008;hp=636752cdfa13f9c8a72564b50bd32b1c1bc39c15;hb=6b14ddadd4d4a4320675bdcd4a81bcfc2529b175;hpb=61445211554cc543c740b987fd73c306a6dd322b diff --git a/common/list_specific b/common/list_specific index 636752c..664adb0 100644 --- a/common/list_specific +++ b/common/list_specific @@ -3,12 +3,12 @@ # our MTAs fix up headers for a slew of spams, so mark these as suspicious # -- joy, 2003-06-28 # deactivated as this rule is also part of SA itself. -#header OUR_MTA_MSGID Message-Id =~ /\@(liszt|master|gluck)\.debian\.org/ +#header OUR_MTA_MSGID Message-Id =~ /\@(bendel|master|gluck)\.debian\.org/ #describe OUR_MTA_MSGID Sounds like a MsgId autogenerated by our MTAs #score OUR_MTA_MSGID 1 # -- joy, 2003-08-15 -header SENDER_FOR_US From =~ /\@(liszt|master|gluck|lists)\.debian\.org/ +header SENDER_FOR_US From =~ /\@(bendel|master|gluck|lists)\.debian\.org/ describe SENDER_FOR_US Sounds like a mail aimed at tricking our MTAs score SENDER_FOR_US 2 @@ -46,9 +46,9 @@ score MDOMOSUBS -2 #describe OURCRONMAILS Sounds like a legitimate cron job mail #score OURCRONMAILS -3 -header LISZT_LOCAL_FORWARDED Resent-From =~ /liszt\.debian\.org/ -describe LISZT_LOCAL_FORWARDED Mail has been locally forwarded. -score LISZT_LOCAL_FORWARDED -5 +header BENDEL_LOCAL_FORWARDED Resent-From =~ /bendel\.debian\.org/ +describe BENDEL_LOCAL_FORWARDED Mail has been locally forwarded. +score BENDEL_LOCAL_FORWARDED -5 # temp work-around for d-l-f @@ -83,15 +83,15 @@ score MAJORDOMOWHITE -3 # count recipients and score those with Too Many. -cord describe TO_TOO_MANY To: too many recipients header TO_TOO_MANY To =~ /(?:,[^,]{1,80}){5}/ -score TO_TOO_MANY 0.1 +score TO_TOO_MANY 1 describe TO_WAY_TOO_MANY To: way too many recipients header TO_WAY_TOO_MANY To =~ /(?:,[^,]{1,80}){10}/ -score TO_WAY_TOO_MANY 0.1 +score TO_WAY_TOO_MANY 3 describe CC_TOO_MANY CC: too many recipients header CC_TOO_MANY CC =~ /(?:,[^,]{1,80}){10}/ -score CC_TOO_MANY 0.1 +score CC_TOO_MANY 3 score CORRUPT_FROM_LINE_IN_HDRS 0 score FM_DDDD_TIMES_2 0