Regex question

[Rick Cooper]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Craig Daters
> Sent: Monday, June 27, 2005 5:16 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Regex question
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I am using a dynamic IP block list with SpamAssassin, but the baysian
> probability on these messages are so low that a negative score is being
> attached. When the score for the dynamic list is applied, it is below
> my threshold still, so I am trying to intercept these messages before
> they make it MailScanner. Or maybe I can Isolate these specifically and
> up the score for these specifically for anything that matches these
> expressions?

Look at the rules that are already getting hits and increase the score, for
instance if they are hitting  RCVD_IN_NJABL_DUL and/or  RCVD_IN_SORBS_DUL

add something like this to your spamassasin.prefs.conf (or local.cf) file

score	RCVD_IN_NJABL_DUL 20.0
score RCVD_IN_SORBS_DUL 20.0

or place the following in your local.cf (Custom rule)

header 	VERIZON_DU Received =~ /pool.*?\.verizon\.net/i
describe    VERIZON_DU HEADER: Verizon Dialup Pool
score		VERIZON_DU 20.0

Of course I make the assumption that a score of 20.0 hits high enough to
prevent delivery, adjust as required.

You should also look at how you are feeding your baysian database. You
should have some facility to unlearn and re-learn these messages if they are
scoring so low.

Rick

[...]


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!