Removing HotBar - example attached

[Pentland G.]

Cheers but that is not quite what I need to do.

I need to detect it without modifying any of the Spam or content scores
or tags.

I'm hoping that someone has some experience of adding in a custom
function and tag i.e. {HotBar} and possibly even the functionality of a
rule set to delete, deliver, disarm etc.

Is this even possible?


The reasons for treating HotBar differently are...

1. Hotbar mail is usually sent deliberately by a valid user, to a valid
user and has meaningful content.

implies: 2. Hotbar mail is usually not Spam.

implies: 3. Hotbar mail is usually not a virus.

4. Stripping/Disabling HotBar or tagging it with an attached warning
about the issues it causes is probably acceptable to our management.

5. Deleting it or giving it a generic {Spam} tag will not be acceptable.


I want to keep "High Scoring Spam Actions" free them up from this type
of function as I can see that I'm going to be asked to implement many
features like this in the future.  Sadly you can only use "High Scoring
Spam Actions" once :-(


Maybe a feature request for...

Really High Scoring Spam Actions

Really Really High Scoring Spam Actions

etc.

Thanks

Gary



Denis Beauchemin wrote:
> Pentland G. wrote:
> 
>> <>Example attached...
>> 
>> 
>>
<http://skins.hotbar.com/skins/mailskins/em/110103/110103_howudoing_prv
>> . gif>
>>
<http://skins.hotbar.com/skins/mailskins/em/110103/110103_heehee_prv.gi
>> f 
>> 
>> 
>> 
>> Blah dee blah dee blah
>> 
>> 
>>  _____
>> 
>> 
>>
<http://promos.hotbar.com/promos/promodll.dll?RunPromo&El=em%3bhotbar%5
>> f element%3bst%3b&SG=sg623&RAND=89351&partner=hotbar> Upgrade Your
>> Email - Click here! 
>> 
>> 
>> 
> James,
> 
> How about something like this in your spam.assassin.prefs.conf file
> (not tested but should work):
> describe HOTBAR01 Hotbar URL found
> uri      HOTBAR01 /\bhotbar\.com/
> score    HOTBAR01 100
> 
> That will give them a high score.  Then just use :
> High Scoring Spam Actions = delete
> 
> Denis

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html