On 21/10/16 18:40, Paul Stead wrote:

A plugin I've developed could be handy here:
https://github.com/fmbla/spamassassin-tagmatch

tagmatch TAGMATCH_TXREP_IP_HIGHSCORE _TXREP_IP_MEAN_
/^[1-9][0-9]+(?:\.[0-9]+)?$/
describe TAGMATCH_TXREP_IP_HIGHSCORE TXRep mean score quite large
score    TAGMATCH_TXREP_IP_HIGHSCORE 0.1

tagmatch TAGMATCH_TXREP_IP_LOWSCORE _TXREP_IP_MEAN_
/^\-[0-9]{2,}(?:\.[0-9]+)?$/
describe TAGMATCH_TXREP_IP_LOWSCORE TxRep mean score quite low
score    TAGMATCH_TXREP_IP_HIGHSCORE -0.1

tagmatch TAGMATCH_TXREP_IP_UNKNOWN _TXREP_IP_UNKNOWN_ /^1$/
describe TAGMATCH_TXREP_IP_UNKNOWN IP unknown to TxRep
score    TAGMATCH_TXREP_IP_UNKNOWN 0.1

As an aside - this alone shouldn't be used to blacklist/whitelist as the
mean doesn't take into account the number of emails it's seen, maybe
meta a few tag matches together

tagmatch __TAGMATCH_TXREP_IP_COUNT_LOTS _TXREP_IP_COUNT_ /^[1-9][0-9]{2,}$/
tagmatch __TAGMATCH_TXREP_IP_HIGHSCORE _TXREP_IP_MEAN_ 
/^[1-9][0-9]+(?:\.[0-9]+)?$/


Will work - I don't have gt/lt functions built in yet, if people think
it worth it I'll have a play after the weekend

Paul
--
Paul Stead
Systems Engineer
Zen Internet

Reply via email to