* Alan J. Flavell wrote (12/04/2005 16:59):
> On Tue, 12 Apr 2005, Chris Lear wrote:
>
>> * Alan J. Flavell wrote (12/04/2005 16:07):
>> >
[...]
>
> Well, we have stanzas in the RCPT ACL which cut extra headers,
> and they are successfully rated by spamassassin. Here's an example:
>
> message = X-HELO-warning: That's a nasty HELO: $sender_helo_name
>
> which gets rated by a rule called NASTY_HELO, and here's a snippet
> from the rejection log:
>
> X-PHYSCI-Spam-Report: 19.2/5.0
> 3.6 NASTY_HELO Nasty-looking HELO
> 0.2 NO_REAL_NAME From: does not include a real name
> 3.6 NO_HOST_LUP Host IP did not look up in DNS
> 4.0 IN_SPAMCOP_BLACKLIST RBL: Blacklisted at spamcop
> 0.8 DEAR_SOMETHING BODY: Contains 'Dear (something)'
> 1.3 MILLION_USD BODY: Talks about millions of dollars
> 2.9 NIGERIAN_BODY1 Message body looks like a Nigerian
>
> [and so on...]
>
> The NO_HOST_LUP is another case where we're cutting a custom header at
> RCPT time, and rating it at spamassassin time. So I'm confident that
> it works.
>
>> which is what I'd prefer
>
> indeed
Looks like I need to look into custom spamassassin rules (I only have
default rules). Bit off-topic for this list.
Thanks again for your help.
Chris
