On Sun, 2012-04-08 at 16:14 -0400, joea wrote: > I was thinking of a regex to taste and paste (say add 5 to SPAM > score), but don't really want to reinvent a wheel. Or run over my > own toes. > What will work for you depends a lot on what your ham stream contains. For instance, I've started to get spam from Russia, and even the old .su domain, recently. I have about three Russian correspondents, so a good solution for me is a meta-rule that applies a high score to all mail from .ru and .su domains except when its from my named correspondents. While this is a good solution for me, it would be terrible for a site that does a lot of business with Russian companies or a person with a lot of Russian friends.
> I did find a plug in or two, but these seem to rely on checking the IP > of sender or relay. Since my mail collects at a mail provider, I > fetch(mail) it and pass it on to a box running spamassassin, they > might not work un-hacked, in any case. > I only added this rule when it became apparent that the 'ok_locales' directive no longer works well: this is something to do with the widespread use of utf-8 encoding IIRC. This has been discussed here, so searching the list archives for relevant threads may help you decide which way to jump. Martin
