RootForum Community

Code: Select all

# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
###########################################################################
#
# rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock
use_bayes=0
required_score 5.0
rewrite_subject 0

Code: Select all

  deny  senders = :
        hosts   = !+relay_from_hosts
        !acl    = spf_from_acl
        message = Your sender is not permitted (read spf.pobox.com)

  # First unpack MIME containers and reject serious errors.
  deny  message = This message contains a MIME error ($demime_reason)
        demime = *
        condition = ${if >{$demime_errorlevel}{2}{1}{0}}
        
  # Reject typically wormish file extensions. There is almost no
  # sense in sending such files by email.
  deny  message = This message contains an unwanted file extension ($found_extension)
        demime = bat:btm:cmd:com:cpl:dll:exe:lnl:msi:pif:prf:reg:scr:vbs:url
  
  # Reject virus infested messages.
  deny  message = This message contains malware ($malware_name)
        demime = *
	malware = *
        log_message = This message contains malware ($malware_name)

  # Reject messages containing "viagra" in all kinds of whitespace/case combinations
  # WARNING: this is an example !
  # deny  message = This message matches a blacklisted regular expression ($regex_match_string)
  #      regex = [Vv] *[Ii] *[Aa] *[Gg] *[Rr] *[Aa]

  # Always add X-Spam-Score and X-Spam-Report headers, using SA system-wide settings
  # (user "nobody"), no matter if over threshold or not.
  
  warn  message = X-Spam-Score: $spam_score ($spam_bar)
        hosts = !+relay_from_hosts
        condition = ${if <{$message_size}{550k}{1}{0}}
        spam = vmail:true
  warn  message = X-Spam-Report: $spam_report
        condition = ${if <{$message_size}{550k}{1}{0}}
        spam = vmail:true

  warn  message = X-Spam-Bar: $spam_bar
        spam = vmail:true 

        #tag the message as spam as per user settings..
	 warn  message = X-New-Subject: ***SPAM($spam_score)*** $h_subject
	         spam = vmail:true
		      condition = ${if >{$spam_score_int}{${lookup mysql
		                {select users.sa_tag *10 from users,domains 
		                where localpart = '${quote_mysql:$local_part}' 
		                and domain = '${quote_mysql:$domain}' 
		                and users.on_spamassassin = '1' 
		                and users.domain_id=domains.domain_id 
		                and users.sa_tag > 0 }{$value}fail}} {yes}{no}}
															





  # This code was derived from a post to exim-users by Alan J. Flavell:
  # http://www.exim.org/pipermail/exim-users/Week-of-Mon-20031201/063095.html
  deny  hosts           = emi.mail.pas.earthlink.net
        message         = X-PH-FW: leaky forwarder, $dnslist_domain=$dnslist_value
                          set acl_m4 = ${if match {$h_received:}
                                {N[(d+).(d+).(d+).(d+)])s+.*by 
                                emi.mail.pas.earthlink.netN}
                                {$4.$3.$2.$1}fail}
        dnslists        = sbl-xbl.spamhaus.org:list.dsbl.org:dynablock.njabl.org/$acl_m4

  deny  hosts           = emi.mail.pas.earthlink.net
        message         = Please use your FQDN for HELO
        condition       = ${if match {$h_received:}{Nhelo=d+.d+.d+.d+N}{yes}{no} }

Code: Select all

  # Always add X-Spam-Score and X-Spam-Report headers, using SA system-wide settings 
  # (user "nobody"), no matter if over threshold or not. 
  
  warn  message = X-Spam-Score: $spam_score ($spam_bar) 
        hosts = !+relay_from_hosts 
        condition = ${if <{$message_size}{550k}{1}{0}} 
        spam = vmail:true 
  warn  message = X-Spam-Report: $spam_report 
        condition = ${if <{$message_size}{550k}{1}{0}} 
        spam = vmail:true 

  warn  message = X-Spam-Bar: $spam_bar 
        spam = vmail:true 

Code: Select all

use_bayes=0 
required_score 5.0 
rewrite_subject 0

Code: Select all

X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on 
	deinhost.de
X-Spam-Level: *
X-Spam-Status: No, score=1.3 required=5.0 tests=AWL,FROM_EXCESS_BASE64,
	HTML_ATTR_UNIQUE,HTML_MESSAGE,HTML_TAG_EXIST_TBODY autolearn=no version=3.1.0