# SpamAssassin rules file: kam sandbox # # Please don't modify this file as your changes will be overwritten with # the next update. Use @@LOCAL_RULES_DIR@@/local.cf instead. # See 'perldoc Mail::SpamAssassin::Conf' for details. # # <@LICENSE> # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to you under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at: # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # # ########################################################################### #RULES FROM DFS FOR TESTING #8/13/2013 #I'm seeing a fair bit of spam from the null return path. That is, #MAIL From:<> (or in the headers, Return-Path: <>). A lot of this #spam lacks any MIME headers (MIME-Version:, Content-Type:) # #I've experimented with a rule that adds points in this situation; most #legitimate DSNs have a MIME-Version: header. # #So would anyone care to test this: # #meta DSN_NO_MIMEVERSION (__BOUNCE_RPATH_NULL && !__MIME_VERSION) #describe DSN_NO_MIMEVERSION Return-Path <> and no MIME-Version: header #score DSN_NO_MIMEVERSION 2 # #The rules __BOUNCE_RPATH_NULL and __MIME_VERSION come from #20_vbounce.cf and 20_head_tests.cf respectively and look like this: # #header __BOUNCE_RPATH_NULL Return-Path =~ /<>/ #header __MIME_VERSION exists:MIME-Version meta DSN_NO_MIMEVERSION (__BOUNCE_RPATH_NULL && !__MIME_VERSION) describe DSN_NO_MIMEVERSION Return-Path <> and no MIME-Version: header score DSN_NO_MIMEVERSION 2 #EOF