Rodney Richison wrote:
> In my fight against spam, yahoo groups seems to be the only casualty.
> I'm not a rule writer, so please forgive this feable attempt and let
> me know if it looks ok????
>
> # Example of a rule for text in the header of the mail:
> header LOCAL__H_from_yahoogroups From =~ /yahoogroups\.com/i
> score LOCAL__H_from_yahoogroups -2.0
> describe LOCAL__H_from_yahoogroups From yahoogroups.com
>
>
This matches
From: [EMAIL PROTECTED]
you can play with other headers such as Sender, List-Id, ... etc, but
all these can be forged.
if these are to be trusted, look at whitelist_rcvd_from. Note that
yahoogroups mail have a domain key signature.
Unfortunatly, I can't enable the domainkeys pluging. I loaded it with
cpan and got this on a lint.
[18770] warn: plugin: failed to parse plugin (from @INC): Can't locate
Mail/DomainKeys/Message.pm in @INC (@INC contains: lib /usr/share/perl5
/etc/perl /usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4
/usr/lib/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8
/usr/local/lib/site_perl) at
/usr/share/perl5/Mail/SpamAssassin/Plugin/DomainKeys.pm line 45.
[18770] warn: BEGIN failed--compilation aborted at
/usr/share/perl5/Mail/SpamAssassin/Plugin/DomainKeys.pm line 45.
[18770] warn: Compilation failed in require at (eval 80) line 1.
[18770] warn: plugin: failed to create instance of plugin
Mail::SpamAssassin::Plugin::DomainKeys: Can't locate object method "new"
via package "Mail::SpamAssassin::Plugin::DomainKeys" at (eval 81) line
1.
