Blocking sexually explicit material...

Aaron K. Moore amoore at DEKALBMEMORIAL.COM
Thu Dec 1 18:38:08 GMT 2005


Billy A. Pumphrey wrote:
>> -----Original Message-----
>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]
>> On Behalf Of Roger Poore Sent: Wednesday, November 30, 2005 6:52 PM
>> To: MAILSCANNER at JISCMAIL.AC.UK
>> Subject: Re: Blocking sexually explicit material...
>> 
>>> That will not work. I did not say /etc/mail/mailscanner. I said
>>> /etc/mail/spamassassin/. This is a spamassassin rulefile, not a
>>> mailscanner file.
>> 
>> Typo on my part. I meant /etc/mail/spamassassin
>> 
>> Thanks again for your help.
>> 
> 
> To add...
> I have DCC, Razer, and pyzor
> 
> Here are what rules that I have:
> In /usr/share/spamassassin (I think I am correct in saying that these
> are the default rules)
> [root at WoodenMS spamassassin]# ls
> 10_misc.cf             20_phrases.cf        30_text_fr.cf
> 20_anti_ratware.cf     20_porn.cf           30_text_nl.cf
> 20_body_tests.cf       20_ratware.cf        30_text_pl.cf
> 20_compensate.cf       20_uri_tests.cf      50_scores.cf
> 20_dnsbl_tests.cf      23_bayes.cf          60_whitelist.cf
> 20_drugs.cf            25_body_tests_es.cf  languages
> 20_fake_helo_tests.cf  25_hashcash.cf       triplets.txt
> 20_head_tests.cf       25_spf.cf            user_prefs.template
> 20_html_tests.cf       25_uribl.cf
> 20_meta_tests.cf       30_text_de.cf

Those are the deafult rules.

> In /etc/mail/spamassassin
> [root at WoodenMS spamassassin]# ls
> 70_sare_adult.cf             71_sare_bml_pre25x.cf
> 70_sare_bayes_poison_nxm.cf  72_sare_bml_post25x.cf
> 70_sare_evilnum0.cf          72_sare_redirect_post3.0.0.cf
> 70_sare_evilnum1.cf          99_sare_fraud_post25x.cf
> 70_sare_evilnum2.cf          99_sare_fraud_pre25x.cf
> 70_sare_header.cf            antidrug.cf
> 70_sare_html0.cf             bogus-virus-warnings.cf
> 70_sare_html.cf              chickenpox.cf
> 70_sare_obfu0.cf             german.cf
> 70_sare_oem.cf               init.pre
> 70_sare_random.cf            local.cf.saved
> 70_sare_ratware.cf           mime_validate.cf
> 70_sare_specific.cf          random.cf
> 70_sare_spoof.cf             RulesDuJour
> 70_sare_uri0.cf              spamassassin-default.rc
> 70_sare_uri1.cf              spamassassin-helper.sh
> 70_sare_uri3.cf              spamassassin-spamc.rc
> 70_sare_uri_arc.cf           tripwire.cf
> 70_sare_uri_eng.cf

These are your local rules and config files.

What version of spamassassin are you running?  You should have only one
of the 99_sare_fraud_post25x.cf and 99_sare_fraud_pre25x.cf in your
local configuration directory not both.
 
> Notice the RulesDuJour directory above, in that directory there is:
> 
> [root at WoodenMS RulesDuJour]# ls
> 70_sare_adult.cf
> 70_sare_specific.cf.20050528-0215
> 70_sare_adult.cf.2
> 70_sare_specific.cf.20050602-0212
> 70_sare_bayes_poison_nxm.cf
> 70_sare_specific.cf.20050923-0135
> 70_sare_bayes_poison_nxm.cf.20050602-0212
> 70_sare_specific.cf.20051002-0157
> 70_sare_evilnum0.cf
> 70_sare_specific.cf.20051014-0207
> 70_sare_evilnum0.cf.20051006-0132
> 70_sare_specific.cf.20051120-0205
> 70_sare_evilnum1.cf
> 70_sare_specific.cf.20051125-0213
> 70_sare_evilnum2.cf
> 70_sare_specific.cf.20051126-0131
> 70_sare_header.cf                          70_sare_spoof.cf
> 70_sare_header.cf.20050523-0134
> 70_sare_spoof.cf.20050527-0134
> 70_sare_header.cf.20050527-0134
> 70_sare_spoof.cf.20050602-0212
> 70_sare_header.cf.20050602-0212
> 70_sare_spoof.cf.20050921-0209
> 70_sare_header.cf.20050612-0128
> 70_sare_spoof.cf.20050930-0203
> 70_sare_header.cf.20050809-0221
> 70_sare_spoof.cf.20051006-0132
> 70_sare_header.cf.20051031-0209
> 70_sare_spoof.cf.20051013-0133
> 70_sare_html.cf
> 70_sare_spoof.cf.20051026-0220
> 70_sare_html.cf.20050602-0212
> 70_sare_spoof.cf.20051102-0201
> 70_sare_html.cf.20050605-0225
> 70_sare_spoof.cf.20051103-0212
> 70_sare_html.cf.20050703-0215
> 70_sare_spoof.cf.20051115-0202
> 70_sare_html.cf.20051006-0132
> 70_sare_spoof.cf.20051119-0129
> 70_sare_oem.cf                             71_sare_bml_pre25x.cf
> 70_sare_oem.cf.20050602-0212               72_sare_bml_post25x.cf
> 70_sare_oem.cf.20051013-0133               72_sare_bml_post25x.cf.2
> 70_sare_oem.cf.20051026-0220              
> 72_sare_redirect_post3.0.0.cf 70_sare_oem.cf.20051101-0128           
> 99_FVGT_Tripwire.cf 70_sare_oem.cf.20051102-0201              
> 99_sare_fraud_post25x.cf 70_sare_oem.cf.20051104-0209              
> 99_sare_fraud_post25x.cf.2 70_sare_random.cf                         
> 99_sare_fraud_pre25x.cf 70_sare_random.cf.20050528-0215           
> antidrug.cf 70_sare_random.cf.20050602-0212            bigevil.cf
> 70_sare_random.cf.20051015-0206            bigevil.cf.2
> 70_sare_random.cf.20051026-0220            blacklist.cf.20050711-1334
> 70_sare_random.cf.20051101-0128            bogus-virus-warnings.cf
> 70_sare_random.cf.20051126-0131            random.current.cf
> 70_sare_ratware.cf                         rules_du_jour
> 70_sare_specific.cf                        sa-blacklist.current
> 70_sare_specific.cf.20050526-0206          sa-blacklist.current.uri.cf
> 70_sare_specific.cf.20050527-0134          tripwire.cf.20050602-0212

This is the working directory for the rules_du_jour script.  It keeps
current, and previous versions of the scripts that it downloads as well
as updates to the actual rules_du_jour script itself.

I keep mine over on /var/spool so that it's clear that this isn't a
directory of rules that are being processed by spamassassin.

Check the rules_du_jour script for documentation on it's various
settings.

-- 
Aaron Kent Moore
Information Technology Services
DeKalb Memorial Hospital, Inc.
Auburn, IN

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list