Differences

This shows you the differences between two versions of the page.

--- internet:mail:mailcleaner_customize [2022/09/01 12:52]
gcooper
+++ internet:mail:mailcleaner_customize [2023/09/01 10:09]
gcooper
@@ Line 60: / Line 60: @@
   * ''login.css''
   * ''navigation.css''
+===== Freemail Domains =====
+It's probably best to blacklist them.
 ===== SpamC Score =====
@@ Line 89: / Line 93: @@
 ===== Customize SpamAssassin =====
-Using the MailCleaner Admin web interface, **restart the Filtering Engine service** after making rule modifications.
+<note tip>Copy customized rules to Mailcleaner cluster members.</note>
+<note tip>Using the MailCleaner Admin web interface, **restart the Filtering Engine service** after making rule modifications.
+</note>
 <file>
@@ Line 116: / Line 123: @@
 /usr/mailcleaner/share/spamassassin/99_custom_rules_scores.cf
-FIXME This worked pretty well, but getting more freemail spam all the time.  Adding freemail_domains here has no effect.  DOMAIN_NUM regex was broken or limited.
 <file>
-freemail_domains sharepointonline.com
+score    DCC_CHECK       1.5
+score    ARC_SIGNED      0.001
-score    KHOP_BIG_TO_CC  2.0
-score    FREEMAIL_FROM 2.0
-score    FREEMAIL_ENVFROM_END_DIGIT  0.25
-score    FREEMAIL_REPLYTO_END_DIGIT  0.25
-score    FREEMAIL_FORGED_REPLYTO 3.0
-score    FREEMAIL_REPLYTO 2.5
-score    FREEMAIL_REPLY  1.0
-score    MC_MANY_FREEMAIL_RCPT  2.5
-rawbody   GOOGLE_APIS   /https?:\/\/storage\.googleapis\.com/i
-score     GOOGLE_APIS   1.5
-describe  GOOGLE_APIS   Has a hyperlink that points to Google APIs
-header    DOMAIN_NUM    From =~ /\@[\w+=\.]*\d{2,}[\w+=\.]*/
-score     DOMAIN_NUM    1.0
-describe  DOMAIN_NUM    Domain name has 2 or more numbers
-header    LONG_SUBJECT  Subject =~ /.{120,}/
-score     LONG_SUBJECT  1.0
-describe  LONG_SUBJECT  Subject line is very long
-</file>
-FIXME Testing this due to more freemail spam:
-<file>
-freemail_domains sharepointonline.com geeks-squadhub23.co
 score    KHOP_BIG_TO_CC  2.0
-score    FREEMAIL_FROM 3.5
+score    FREEMAIL_FROM   3.5
 score    FREEMAIL_ENVFROM_END_DIGIT  1.0
 score    FREEMAIL_REPLYTO_END_DIGIT  1.0
-score    FREEMAIL_FORGED_REPLYTO 3.5
+score    FREEMAIL_FORGED_REPLYTO  3.5
-score    FREEMAIL_REPLYTO 3.5
+score    FREEMAIL_REPLYTO  3.5
 score    FREEMAIL_REPLY  3.5
 score    MC_MANY_FREEMAIL_RCPT  3.5
@@ Line 174: / Line 149: @@
 describe  LONG_SUBJECT  Subject line is very long
+header    EMPTY_SUBJECT Subject =~ /^$/
+score     EMPTY_SUBJECT 1.5
+describe  EMPTY_SUBJECT Subject header exists but is empty
 </file>
+==== 99_custom_rules_keywords.cf ====
+<file>
+header   __SPAMMY_SUBJECT_KEYWORDS Subject =~ /web design|website|web site|hiring|application developement|renewal|mobile|app|Geek Squad|Storage Notification App|divorced|4fun|termination|voip|reviews|SEO|AARP/is
+body     __SPAMMY_BODY_KEYWORDS /web design|website|web site|hiring|application developement|renewal|india|mobile|app|Geek Squad|Storage Notification App|divorced|4fun|termination|voip|reviews|SEO|AARP/is
+meta     SPAMMY_KEYWORDS __SPAMMY_SUBJECT_KEYWORDS || __SPAMMY_BODY_KEYWORDS
+score    SPAMMY_KEYWORDS 1.6
+describe SPAMMY_KEYWORDS Add points to messages with spammy keywords
+</file>

Virtual Architects Support Wiki

User Tools

Site Tools

Differences

Page Tools