I believe if I make a rule that adds scores for when the Envelope Sender
and To addresses are different and it is coming from a free e-mail
address. I was hoping to reference the free email by existing rules and
see lots of possibilities, see below. Is there are way to match any rule
with SARE_FREE in it? Also, the rule name look a bit scewed at the end
of some of the names, I don't recall many, if any, rules with lower case
in the name. I did a quick grep of the rules in my /var/db/spamassassin/
directory and the names are listed correctly from those updates.
rule_name | rule_description
------------------------+--------------------------------------------------
SARE_FREE_WEBM_OwnEm1 | Sender used free email account - may be spammer
SARE_FREE_WEBM_Zwallet | Sender used free email account - may be spammer
SARE_FREE_WEBM_LATINML | Maybe spammer with free email
SARE_FREE_WEBM_COMWALL | Maybe spammer with free email
SARE_FREE_WEBM_Dora | Sender used free email account - may be spammer
SARE_FREE_WEBM_Kero | Sender used free email account - may be spammer
SARE_FREE_WEBM_Uymail | Sender used free email account - may be spammer
SARE_FREE_WEBM_OwnEm2 | Sender used free email account - may be spammer
Also, how can I reference the Envelope Sender? Is it the header
'Envelope-Sender'? I want to compare that to the To header to see if
they match.
Finally, would any of these types of rules be detrimental to my scoring
or anyone sees how they would generate FPs?
--
Robert
