[Wlug] Procmail Question

[Marc Hughes]

OK, spamassasin looks pretty damned cool ... I love the "reasons" why
something is spam.

-Marc


SPAM: Content analysis details:   (8.10 hits, 5 required)
SPAM: TO_NO_USER         (1.7 points)  To: has no local-part before @
sign
SPAM: SMTPD_IN_RCVD      (1.2 points)  Received via SMTPD32 server
(SMTPD32-n.n)
SPAM: X_PRIORITY_HIGH    (0.4 points)  Sent with 'X-Priority' set to
high
SPAM: X_MSMAIL_PRIORITY_HIGH (0.4 points)  Sent with 'X-Msmail-Priority'
set to high
SPAM: USER_AGENT_OE      (0.2 points)  X-Mailer header indicates a
non-spam MUA (Outlook Express)
SPAM: ACT_NOW            (0.3 points)  BODY: Act Now! Don't Hesitate!
SPAM: EXCUSE_14          (0.2 points)  BODY: Tells you how to stop
further spam
SPAM: EXCUSE_1           (0.1 points)  BODY: Gives an excuse about why
you were sent this spam
SPAM: SPAM_PHRASE_03_05  (1.1 points)  BODY: Spam phrases score is 03 to
05 (medium)
SPAM:                    [score: 3]
SPAM: BIG_FONT           (0.3 points)  BODY: FONT Size +2 and up or 3
and up
SPAM: HTML_WITH_BGCOLOR  (0.3 points)  BODY: HTML mail with non-white
background
SPAM: HTML_FONT_COLOR_RED (0.3 points)  BODY: HTML font color is red
SPAM: HTML_50_70         (0.3 points)  BODY: Message is 50-70% HTML tags
SPAM: HTML_FONT_COLOR_NOHASH (0.2 points)  BODY: HTML font color is
missing hash (
SPAM: HTML_FONT_COLOR_BLUE (0.2 points)  BODY: HTML font color is blue
SPAM: MISSING_MIMEOLE    (0.5 points)  Message has X-MSMail-Priority,
but no X-MimeOLE
SPAM: CTYPE_JUST_HTML    (0.4 points)  HTML-only mail, with no text
version

-----Original Message-----
From: Theo Van Dinter [mailto:felicity@kluge.net] 
Sent: Friday, November 08, 2002 10:13 AM
To: wlug@mail.wlug.org
Subject: Re: [Wlug] Procmail Question


On Fri, Nov 08, 2002 at 10:07:37AM -0500, Theo Van Dinter wrote:
> :0:
> * 1^1 ^From.*jenny@axte84\.com
> * 1^1 ^Subject.*MILLION OPT-IN EMAIL ADDRESSES
> Badspam

Oops, slight update:

:0:
* 1^0 ^From.*jenny@axte84\.com
* 1^0 ^Subject.*MILLION OPT-IN EMAIL ADDRESSES
Badspam

I believe they'd be functionally equivilent for you, but the first one
keeps looking for matches after the first hit.  The second one stops at
1 hit, so it's more efficient. :)

There's a nice discussion about this stuff at:
http://www.rosat.mpe-garching.mpg.de/mailing-lists/procmail/1998-01/msg0
0335.html

:)

-- 
Randomly Generated Tagline:
"This is a beta release of Red Hat Linux.  It is not intended for
mission  critical applications.  It's not even intended for non-mission
critical  applications.  Important data should not be entrusted to
Wolverine,  as it may eat it and make loud belching noises."
         - RedHat Beta release "Wolverine"