Byteplant Forum

Home » CleanMail Support » CleanMail SpamAssassin Filter » Trying to stop the German Racist Spam
Trying to stop the German Racist Spam [message #350] Wed, 23 June 2004 10:26 Go to previous message
BradlayLaw
Messages: 9
Registered: June 2004
Junior Member
I'm trying to write a rule to prevent the hundreds of mails we get a day generated by the Sober.G virus (the racist german spewing one). I looked through the headers and they all have one thing in common :

Message-ID:

eg. Message-ID: <32f7307a29a21e.ff4f1.qmail@belsign.be>

So I created a rule like so :

header LOCAL_GERMANSPAM Message-ID =~ /<.*\..*\.qmail@.*>/
describe LOCAL_GERMANSPAM Captures German Racist Spam
score LOCAL_GERMANSPAM 5.1



I tried the regular expression with my text editors find function and it found the message-ID fine enough.

This text was put in a file called germanspam.cf and placed in the folder with our other sa rulesets and config files and I restarted the NST service.

The german email is still getting through. I checked the headers and my rule appears to be picking up on it but the score is not changing. Here is part of a header after my rule was installed :

X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on NETPILOT
X-Spam-Status: No, hits=2.6 required=5.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
LOCAL_GERMANSPAM,NO_REAL_NAME,PRIORITY_NO_NAME autolearn=no
version=2.63
X-Spam-Level: **


Do you have any idea on where I am going wrong and if there is a better way to stop this spam.

Thanks



Post Edited (06-23-04 11:03)
 
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: Testing new rulesets with --lint
Next Topic: Changing tagget header
Goto Forum:
  


Current Time: Mon Dec 18 13:38:02 CET 2017