--On Sunday, January 29, 2006 11:41 -0700 Philip Prindeville
<[EMAIL PROTECTED]> wrote:
Also, instead of flagging spam, what about just rejecting the email in
filter_end() if SA reports too high a probability of it being spam?
Of course.
$names =~ s/,/ /g;
if ($hits >= 8.0) {
md_graphdefang_log('spam', "$hits $names", $RelayAddr);
action_bounce("This appeared to be spam");
}
Choose your own threshold and your own message. We change commas to
spaces in $names for the sake of the log. By logging the score and
the names, we can more easily assess the problem in cases of legit mail
that got rejected.
We also assign points and names to a few things more easily checked
in Mimedefang, like bogus Helo strings or no reverse DNS. If $hits
has reached 8.0 before we run the SA tests, we can skip SA.
Joseph Brennan
Columbia University Information Technology
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
