{SPAM} MailScanner - Content Filtering

[Matt Kettler]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Daniel Straka wrote:

>I keep getting the following POS message delivered to our domain. Must
>be too new for the MS blacklist filters and the reply-to field is always
>spoofed and changing, worst of all its cc'd to bunches of users so even
>if only a few get through MS, they end-up delivered to hundreds of
>mailboxes.
>
>Ideally, I'd like to do content filtering on "over $380,000 for" and
>delete them. Is there anyway for MS to do this?
>
>
If you're using SpamAssassin it's easy. Body rules are just simple
regular expressions:


body L_OVER_380K   /\bover \$380\,000 for\b/i
score L_OVER_380K   5.0

You can add it to a .cf file in /etc/mail/spamassassin, or append it to
spam.assassin.prefs.conf. (spam.assassin.prefs.conf should allow this,
as it's only a privileged option, not an administrator option)

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!