1 # raise or lower as needed
4 # do not mess with the original message body, only notify in headers
6 clear_unsafe_report_template
9 # we do not use nor support this on NFS
12 # do not throw off Bayes
13 bayes_ignore_header X-Bogosity
14 bayes_ignore_header X-Spam-Flag
15 bayes_ignore_header X-Spam-Status
16 bayes_ignore_header X-Spam-Report
18 # English-only for all lists on public-inbox.org
20 # we have "loadplugin Mail::SpamAssassin::Plugin::TextCat" in a *.pre file
23 # uncomment the following for importing archives:
28 # manual rules (some stolen from debian)
29 # these require "allow_user_rules 1" in the system-wide config
31 rawbody LOCAL_VIEWINBROWSER /View this message in a browser/
32 describe LOCAL_VIEWINBROWSER "HTML mail not welcome"
33 score LOCAL_VIEWINBROWSER 2.8
35 body MEETUPSECURELY /meetupsecurely\.com/i
36 describe MEETUPSECURELY "site used by spammers"
37 score MEETUPSECURELY 2.8
39 body HELLOMYDEAR /hello my dear/i
40 describe HELLOMYDEAR "spam phrase"
43 body JUSTAMAILBOX /I'm just a mailbox used for sending notifications/
44 describe JUSTAMAILBOX "autoreply phrase"
45 score JUSTAMAILBOX 5.0
48 header PI_HELLO subject =~ /^hello \w+/i
49 describe PI_HELLO "Hello foo"
53 header PI_DNOT subject =~ /delivery\s+(?:status\s+)?notification/i
54 describe PI_DNOT "delivery notification"
58 header PI_PARCEL subject =~ /could not deliver your parcel/
59 describe PI_PARCEL "delivery notification"
63 header PI_DNOTICE subject =~ /notice to appear/i
64 describe PI_DNOTICE "notice to appear"
67 full ZIPFILE /\b(?:file)?name\=.*\.zip\b/i
68 describe ZIPFILE zipfile attachment
71 header PI_NUM_WORD_SUBJ subject =~ /^\d+ [a-z0-9_-]+$/
72 describe PI_NUM_WORD_SUBJ "number and single word subject"
73 score PI_NUM_WORD_SUBJ 0.5
75 header PI_NUM_ONLY_SUBJ subject =~ /^\d+$/
76 describe PI_NUM_ONLY_SUBJ "number only subject"
77 score PI_NUM_ONLY_SUBJ 0.5
79 header PI_IMPORTANCE_HIGH importance =~ /^high$/
80 describe PI_IMPORTANCE_HIGH "importance: high header"
81 score PI_IMPORTANCE_HIGH 0.5
83 meta PI_ZIPFILE_NUM_WORD_SUBJ PI_NUM_WORD_SUBJ && ZIPFILE
84 describe PI_ZIPFILE_NUM_WORD_SUBJ "common spam/virus pattern"
85 score PI_ZIPFILE_NUM_WORD_SUBJ 3
87 meta PI_ZIPFILE_NUM_ONLY_SUBJ PI_NUM_ONLY_SUBJ && ZIPFILE
88 describe PI_ZIPFILE_NUM_ONLY_SUBJ "common spam/virus pattern"
89 score PI_ZIPFILE_NUM_ONLY_SUBJ 3
91 full DOCFILE /\b(?:file)?name\=.*\.doc\b/i
92 describe DOCFILE doc attachment
99 # trust paid whitelist services? never
100 score RCVD_IN_RP_SAFE 0.0
101 score RCVD_IN_RP_CERTIFIED 0.0
103 # this depends on PublicInbox::SaPlugin::ListMirror:
104 # header LIST_MIRROR_RECEIVED eval:check_list_mirror_received()
105 # describe LIST_MIRROR_RECEIVED Received does not match trusted list server
106 # score LIST_MIRROR_RECEIVED 10
108 # this depends on PublicInbox::SaPlugin::ListMirror:
109 # header LIST_MIRROR_BCC eval:check_list_mirror_bcc()
110 # describe LIST_MIRROR_BCC Mailing list was Bcc-ed
111 # score LIST_MIRROR_BCC 10
113 # list_mirror X-Mailing-List git@vger.kernel.org *.kernel.org git@vger.kernel.org
115 # DNSWL scores is a bit too powerful by default (-5 adjustment!)
116 # default score RCVD_IN_DNSWL_LOW 0 -0.7 0 -0.7
117 # default score RCVD_IN_DNSWL_MED 0 -2.3 0 -2.3
118 # default score RCVD_IN_DNSWL_HI 0 -5 0 -5
119 score RCVD_IN_DNSWL_MED 0 -0.1 0 -0.1
120 score RCVD_IN_DNSWL_HI 0 -0.2 0 -0.2