Re: My spamassassin rules

[David Gibbs <david@xxxxxxxxxxxx>]

Dan wrote:
> > Actually, true spammers are loosing the battle against spamassassin (at
> > least in my case) in a major way.  I get very little true spam.
>
> So, you don't get the ads for cia1is, cialliss, vigra, vieagra, or any of
> the thousands of other variations?  And what about the ones with no words
> that trigger SA points, but link to other nefarious sites?  Certainly, you
> haven't tagged all of the thousands of ISP's that deliver spam, have you?

Very little of that stuff gets past spamassassin.

I get maybe 4 or 5 false negatives a week ... and maybe 1 or 2 false positives a year.

> > FWIW: Your message was not actually delivered to me ... 
> So, how did you get my message then, if it was discarded?

I saw it in the PCTECH RSS feed and checked the archives. :)

Problem is, my procmail filter checks the spam score by analyzing the message headers and figuring out how many '*' show up in the X-Spam-Level header.

* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*

This works in general ... but for my list mail account I've set the score to 50 (as nobody knows the list mail address and it never gets spammed).   In the case of your message, the spam score was actually 12 ... but spamassassin didn't consider it spam. 

Unfortunately, the procmail rule was applying the spam level check without considering if spamassassin considered it spam or not.

So I added another header check ... 

* ^X-Spam-Status: Yes
* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*

So now both rules have be satisfied in order for the message to be discarded.

david