PDA

View Full Version : Spamassassin info:



WestHost - CSimiskey
03-31-2004, 02:17 PM
Some of these aren't particularly well documented, so here is a copy of a list found here:

http://maxo.captainnet.net/mailAdmin/spamAssassin/add.html


required_hits (default: 5)

Set the number of hits required before a mail is considered spam. n.nn can be an integer or a real number. Note that this isn't the score at which mail will be rejected outright; that is set separately in Exim configure file. 5.0 is the default setting, and is quite aggressive; it would be suitable for a single-user setup, but if you're an ISP installing SpamAssassin, you should probably set the default to be more conservative, like 8.0 or 10.0. It is not recommended to automatically delete or discard messages marked as spam, as your users will complain, but if you choose to do so, only delete messages with an exceptionally high score such as 15.0 or higher.

whitelist_from add@ress.com

Used to specify addresses which send mail that is often tagged (incorrectly) as spam; it also helps if they are addresses of big companies with lots of lawyers. This way, if spammers impersonate them, they'll get into big trouble, so it doesn't provide a shortcut around SpamAssassin.

Whitelist and blacklist addresses are now file-glob-style patterns, so friend@somewhere.com, *@isp.com, or *.domain.net will all work. Specifically, * and ? are allowed, but all other metacharacters are not. Regular expressions are not used for security reasons.

Multiple addresses per line, separated by spaces, is OK. Multiple whitelist_from lines is also OK.

The headers checked for whitelist addresses are as follows: if Resent-From is set, use that; otherwise check all addresses taken from the following set of headers:


Envelope-Sender
Resent-Sender
X-Envelope-From
From

e.g.


whitelist_from joe@example.com fred@example.com
whitelist_from *@example.com


unwhitelist_from add@ress.com

Used to override a default whitelist_from entry, so for example a distribution whitelist_from can be overriden in a local.cf file, or an individual user can override a whitelist_from entry in their own user_prefs file. The specified email address has to match exactly the address previously used in a whitelist_from line.

e.g.


unwhitelist_from joe@example.com fred@example.com
unwhitelist_from *@example.com



whitelist_from_rcvd addr@lists.sourceforge.net sourceforge.net

Use this to supplement the whitelist_from addresses with a check against the Received headers. The first parameter is the address to whitelist, and the second is a domain to match in the Received headers. This domain does not allow globbing, and must be followed by a numeric IP address in brackets in the Received headers.

e.g.


whitelist_from_rcvd joe@example.com example.com
whitelist_from_rcvd *@axkit.org sergeant.org



unwhitelist_from_rcvd add@ress.com

Used to override a default whitelist_from_rcvd entry, so for example a distribution whitelist_from_rcvd can be overriden in a local.cf file, or an individual user can override a whitelist_from_rcvd entry in their own user_prefs file. The specified email address has to match exactly the address previously used in a whitelist_from_rcvd line.

e.g.


unwhitelist_from_rcvd joe@example.com fred@example.com
unwhitelist_from_rcvd *@axkit.org



blacklist_from add@ress.com

Used to specify addresses which send mail that is often tagged (incorrectly) as non-spam, but which the user doesn't want. Same format as whitelist_from.



unblacklist_from add@ress.com

Used to override a default blacklist_from entry, so for example a distribution blacklist_from can be overriden in a local.cf file, or an individual user can override a blacklist_from entry in their own user_prefs file.

e.g.


unblacklist_from joe@example.com fred@example.com
unblacklist_from *@spammer.com



whitelist_to add@ress.com

If the given address appears in the To: or Cc: headers, mail will be whitelisted. Useful if you're deploying SpamAssassin system-wide, and don't want some users to have their mail filtered. Same format as whitelist_from. Sets score to -6

There are three levels of To-whitelisting, whitelist_to, more_spam_to and all_spam_to. Users in the first level may still get some spammish mails blocked, but users in all_spam_to should never get mail blocked.


more_spam_to add@ress.com

See above. Sets score to -20

all_spam_to add@ress.com

See above. Sets score to -100


Of particular interest that I was looking for was the 'whitelist_to' functionality so that I can not filter e-mail for a particular recipient address (not just whitelisting for people sending to me). Hopefully it will be of use to others.