how to wirte this kind of mcp rule

Julian Field MailScanner at ecs.soton.ac.uk
Mon Jul 24 08:34:31 IST 2006


On 24 Jul 2006, at 06:32, ankush grover wrote:

>> >> What I want to know is how to stop any mail if the mail contains
>> >> "VIzAGRA" as one of the words in the subject ?
>> >
>> > You still need to add the "describe" and "score" lines as well,  
>> for it
>> > to be recognised and used by SpamAssassin. Give it a large score  
>> (e.g.
>> > 1000) and make sure your High Scoring Spam Actions include  
>> "delete" so
>> > that it gets removed by MailScanner.
>> >
>> > Sorry if that lot wasn't clear in my previous email, I didn't  
>> write the
>> > message very well :-(
>
> Describe and Score are already present in the mcp rules. High Scoring
> Spam Actions include delete.

This is nothing to do with mcp. They should all be in your  
spam.assassin.prefs.conf.

>
>
>> just fyi, a similar mail hit the following rules at my site.. most
>> rules are stock spamassasin 3.1.3 (afaik). Looks like you could
>> benefit a lot from network tests.
>>
>> 4.00    BAYES_99        Bayesian spam probability is 99 to 100%
>> 0.77    DIGEST_MULTIPLE Message hits more than one network digest  
>> check
>> 0.14    FORGED_RCVD_HELO        Received: contains a forged HELO
>> 0.00    HTML_MESSAGE    HTML included in message
>> 0.50    RAZOR2_CF_RANGE_51_100  Razor2 gives confidence level  
>> above 50%
>> 1.50    RAZOR2_CF_RANGE_E8_51_100       Razor2 gives engine 8  
>> confidence level
>> above 50%
>> 0.50    RAZOR2_CHECK    Listed in Razor2 (http://razor.sf.net/)
>> 2.05    RCVD_IN_SORBS_DUL       SORBS: sent directly from dynamic  
>> IP address
>> 1.46    RCVD_IN_SORBS_WEB       SORBS: sender is a abuseable web  
>> server
>> 3.00    URIBL_BLACK     Contains an URL listed in the URIBL blacklist
>> 1.64    URIBL_SBL       Contains an URL listed in the SBL blocklist
>> 2.14    URIBL_WS_SURBL  Contains an URL listed in the WS SURBL  
>> blocklist
>>
>> - dhawal
>>
>
> I haven't installed razor on my system. I am using FC3 and I think
> perl-Razor-Agent is the package that needs to be installed for this
> purpose. Where do I have to mention the above rules means in which
> spamassassin file ?
>
> Thanks & Regards
>
> Ankush Grover
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!

-- 
Julian Field
MailScanner at ecs.soton.ac.uk



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.



More information about the MailScanner mailing list