Re: PYZOR_CHECK always have zero score, why?
On 19 Oct 2016, at 23:23, Pedro David Marco wrote: Hmmm... Relevant context of those lines is lost with grep, but they confirm something odd is going on. Bill, your remark is welcome, what lines/info should i pay attention to or event post here? The full output of the Dumper. As John said, pastebin or a similar site can be useful for this. Each of those lines with 'pyzor' in them is part of some larger data structure, and it would help to know what those structures are.
Re: Custom rule based on AWL score
On Thu, 20 Oct 2016, Bowie Bailey wrote: On 10/20/2016 12:55 PM, David B Funk wrote: On Thu, 20 Oct 2016, John Hardin wrote: > On Thu, 20 Oct 2016, Ian Zimmerman wrote: > > > On 2016-10-20 08:34, simplerezo wrote: > > > > > My understanding is that AWL is helping frequent senders who are > > > known > > > to not send spam to "reduce" their spam score, preventing false > > > positive. That's exactly what I want to rely on for my rules: adding > > > score for mail with "invoice" pretention and an attachment but only > > > for very unknown users (or spammers). > > > > Just add your custom rules globally, with reasonable scores. > > > > Whitelisted senders get a _huge_ bonus (I think it's 100 points by > > default, maybe customizable), so they won't be affected if you do it > > right. > > ITYM -100 points. :) > > Small but important detail... :) which is why I like the "dev_whitelist*" variety. They have a value of -7.5 (instead of that -100 sledgehammer) which is usually enough to get legit mail thru but not enough to swamp out a major rules hit on real spam (which happens to get issued by the people you're trying to protect). EG: def_whitelist_auth *@nih.gov Interesting, but completely irrelevant here since we're talking about AWL and *not* the normal whitelist rules. AWL scores are dynamic and can be either positive or negative. Yes but the OP's problem would *probably* be addressed by whitelisting the senders rather than trying to ignore specific rules based on AWL, which cannot at present be done. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- A superior gunman is one who uses his superior judgment to keep himself out of situations that would require the use of his superior skills. --- 303 days since the first successful real return to launch site (SpaceX)
Re: Custom rule based on AWL score
On 10/20/2016 12:55 PM, David B Funk wrote: On Thu, 20 Oct 2016, John Hardin wrote: On Thu, 20 Oct 2016, Ian Zimmerman wrote: On 2016-10-20 08:34, simplerezo wrote: My understanding is that AWL is helping frequent senders who are known to not send spam to "reduce" their spam score, preventing false positive. That's exactly what I want to rely on for my rules: adding score for mail with "invoice" pretention and an attachment but only for very unknown users (or spammers). Just add your custom rules globally, with reasonable scores. Whitelisted senders get a _huge_ bonus (I think it's 100 points by default, maybe customizable), so they won't be affected if you do it right. ITYM -100 points. :) Small but important detail... :) which is why I like the "dev_whitelist*" variety. They have a value of -7.5 (instead of that -100 sledgehammer) which is usually enough to get legit mail thru but not enough to swamp out a major rules hit on real spam (which happens to get issued by the people you're trying to protect). EG: def_whitelist_auth *@nih.gov Interesting, but completely irrelevant here since we're talking about AWL and *not* the normal whitelist rules. AWL scores are dynamic and can be either positive or negative. -- Bowie
Re: R: Custom rule based on AWL score
On 10/20/2016 06:44 PM, Nicola Piazzi wrote: Why not try my powerful plugin to reduce score of known users ? Is based on people that answer to us and in my case, after 3 week of learning, it HIT 70% of incoming messages that are absolutely ham http://saplugin.16mb.com/ If you mean your OW plugin The fact that "It can be used ONLY when the spamassassin installation is in the same smarthost that deliver both incoming and outgoing emails." rules out its usage in many larger setups. Pity... Axv
Re: Custom rule based on AWL score
On Thu, 20 Oct 2016, John Hardin wrote:
On Thu, 20 Oct 2016, Ian Zimmerman wrote:
On 2016-10-20 08:34, simplerezo wrote:
My understanding is that AWL is helping frequent senders who are known
to not send spam to "reduce" their spam score, preventing false
positive. That's exactly what I want to rely on for my rules: adding
score for mail with "invoice" pretention and an attachment but only
for very unknown users (or spammers).
Just add your custom rules globally, with reasonable scores.
Whitelisted senders get a _huge_ bonus (I think it's 100 points by
default, maybe customizable), so they won't be affected if you do it
right.
ITYM -100 points. :)
Small but important detail... :)
which is why I like the "dev_whitelist*" variety. They have a value of -7.5
(instead of that -100 sledgehammer) which is usually enough to get legit mail
thru but not enough to swamp out a major rules hit on real spam (which happens
to get issued by the people you're trying to protect).
EG:
def_whitelist_auth *@nih.gov
--
Dave Funk University of Iowa
College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_adminIowa City, IA 52242-1527
#include
Better is not better, 'standard' is better. B{
R: Custom rule based on AWL score
Why not try my powerful plugin to reduce score of known users ? Is based on people that answer to us and in my case, after 3 week of learning, it HIT 70% of incoming messages that are absolutely ham http://saplugin.16mb.com/ Nicola Piazzi CED - Sistemi COMET s.p.a. Via Michelino, 105 - 40127 Bologna - Italia Tel. +39 051.6079.293 Cell. +39 328.21.73.470 Web: www.gruppocomet.it -Messaggio originale- Da: John Hardin [mailto:jhar...@impsec.org] Inviato: giovedì 20 ottobre 2016 18:36 A: users@spamassassin.apache.org Oggetto: Re: Custom rule based on AWL score On Thu, 20 Oct 2016, Ian Zimmerman wrote: > On 2016-10-20 08:34, simplerezo wrote: > >> My understanding is that AWL is helping frequent senders who are >> known to not send spam to "reduce" their spam score, preventing false >> positive. That's exactly what I want to rely on for my rules: adding >> score for mail with "invoice" pretention and an attachment but only >> for very unknown users (or spammers). > > Just add your custom rules globally, with reasonable scores. > > Whitelisted senders get a _huge_ bonus (I think it's 100 points by > default, maybe customizable), so they won't be affected if you do it > right. ITYM -100 points. :) Small but important detail... :) -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- No representation without taxation! --- 303 days since the first successful real return to launch site (SpaceX)
Re: Custom rule based on AWL score
On Thu, 20 Oct 2016, Ian Zimmerman wrote: On 2016-10-20 08:34, simplerezo wrote: My understanding is that AWL is helping frequent senders who are known to not send spam to "reduce" their spam score, preventing false positive. That's exactly what I want to rely on for my rules: adding score for mail with "invoice" pretention and an attachment but only for very unknown users (or spammers). Just add your custom rules globally, with reasonable scores. Whitelisted senders get a _huge_ bonus (I think it's 100 points by default, maybe customizable), so they won't be affected if you do it right. ITYM -100 points. :) Small but important detail... :) -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- No representation without taxation! --- 303 days since the first successful real return to launch site (SpaceX)
Re: Custom rule based on AWL score
On Thu, 20 Oct 2016 08:34:04 -0700 (MST) simplerezo wrote: > My understanding is that AWL is helping frequent senders who are > known to not send spam to "reduce" their spam score, preventing false > positive. Which is why I pointed you towards a short paragraph that describes what it actually does: "This plugin module provides support for the auto-whitelist. It keeps track of the average SpamAssassin score for senders. Senders are tracked using a combination of their From: address and their IP address. It then uses that average score to reduce the variability in scoring from message to message and modifies the final score by pushing the result towards the historical average. This improves the accuracy of filtering for most email."
Re: Custom rule based on AWL score
On 2016-10-20 08:34, simplerezo wrote: > My understanding is that AWL is helping frequent senders who are known > to not send spam to "reduce" their spam score, preventing false > positive. That's exactly what I want to rely on for my rules: adding > score for mail with "invoice" pretention and an attachment but only > for very unknown users (or spammers). Just add your custom rules globally, with reasonable scores. Whitelisted senders get a _huge_ bonus (I think it's 100 points by default, maybe customizable), so they won't be affected if you do it right. -- Please *no* private Cc: on mailing lists and newsgroups Personal signed mail: please _encrypt_ and sign Don't clear-text sign: http://cr.yp.to/smtp/8bitmime.html
Re: Custom rule based on AWL score
My understanding is that AWL is helping frequent senders who are known to not send spam to "reduce" their spam score, preventing false positive. That's exactly what I want to rely on for my rules: adding score for mail with "invoice" pretention and an attachment but only for very unknown users (or spammers). -- View this message in context: http://spamassassin.1065346.n5.nabble.com/Custom-rule-based-on-AWL-score-tp123087p123091.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Custom rule based on AWL score
On Thu, 20 Oct 2016 08:01:17 -0700 (MST) simplerezo wrote: > Because our users cannot easyly add all theirs contacts to whitelist. > > AWL is a great feature, and it's working well: so it would be nice > for us to put some restrictives rules only active for "unknown" users > (example: "invoices" ...). I don't think you understand what AWL actually does. Read the description section of: https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Plugin_AWL.html
Re: Custom rule based on AWL score
Because our users cannot easyly add all theirs contacts to whitelist. AWL is a great feature, and it's working well: so it would be nice for us to put some restrictives rules only active for "unknown" users (example: "invoices" ...). -- View this message in context: http://spamassassin.1065346.n5.nabble.com/Custom-rule-based-on-AWL-score-tp123087p123089.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Custom rule based on AWL score
On Thu, 20 Oct 2016 03:55:29 -0700 (MST) simplerezo wrote: > Hi, > > Is it possible to write rule based on AWL score? No > We have some customs rules that we don't want to enable for > "well-known" contacts... Why not just whitelist them?
Custom rule based on AWL score
Hi, Is it possible to write rule based on AWL score? We have some customs rules that we don't want to enable for "well-known" contacts... I tried this: metaSR__AWL ( AWL <= -1 ) describeSR__AWL AWL is at least -1 score SR__AWL -0.01 But it does not seems to work... -- View this message in context: http://spamassassin.1065346.n5.nabble.com/Custom-rule-based-on-AWL-score-tp123087.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
