Chris Santerre wrote: > > From: Philip Prindeville [mailto:[EMAIL PROTECTED] > > > Sent: Tuesday, February 21, 2006 9:45 PM > > To: users@spamassassin.apache.org > > Subject: Pling pling, many exclamations, and Yahoo! > > > > > > I was noticing that every time that someone forwards me an > > article from yahoo! news that it scores high on the > > MANY_EXCLAMATIONS and PLING_PLING tests. > > > > Unfortunately Yahoo! also changed the policy about generating > > the MAIL FROM: line. It used to be that of the person sending > > to you. Now it's some long unique id: > > > > <mail-to-friend.geytimbvgyztcmrrfyyc4nrqhaydsmjqgaxdmnbsg43c4m > > [EMAIL PROTECTED]> > > > > That can't be whitelisted... Grrr... > > > > Is it reasonable to ask if these two tests above can be made to > > *not* count bangs associated with names that have a bang as part > > of their trademark? I.e. CinemaNow! and Yahoo! etc... > > > > -Philip > > Why not just right a meta rule so that if the email hits PLING PLING, > or MANY_EXCLAMATIONS, and has @returns.bulk.yahoo.com in it, you > simply reduce the score by the amount in PLING PLING, or > MANY_EXCLAMATIONS? > > Even if a spammer fakes this, all it does is remove the PLING PLING or > MANY_EXCLAMATIONS scores. No biggy. > > --Chris >
Because I suspect that Yahoo! might end up rotating through the format of the sending address to stop spammers from borrowing it... So they will use one format, and then change it after a while, and then use the new one for a bit, then change it again... -Philip
