Spam Assassin

[mentordas]

I wonder if anyone can tell me how to configure Spam Assassin to allow only email messages with a unique text in the subject line? I have a form mail that Spam Assassin blocks along with all the other Spam. I can white list an email address but I would sure like to white list this particular message with the same unique subject line that comes with all messages from my formmail. Basically what I want to know is can I white list a unique subject text? By the way I went to Spam Assassin’s web site and could understand nothing.

[brett]

Yes, Spam Assassin will technically allow custom rules like this, but I was informed months ago that Dathorn wouldn't allow it for security reasons. Hopefully this can/will change.

This file is the one to usually modify I believe:
~/.spamassassin/user_prefs

And this page is where I found out how to do it, but then I found out it wouldn't work with my current provider =(

http://mywebpages.comcast.net/mkettler/sa/SA-rules-howto.txt

Give it a try and let me know if things have changed...

Good luck!

And a few more links that may be helpful:

http://www.intuitive.com/spam-assassin-rule-help.html

http://www.rulesemporium.com/

[mentordas]

Spam Assassin

Thank You Brett!!!

I did it and it works. Hopefully it does not make Andrew unhappy

[Andy]

Thanks for the link brett

I was about to look ito using SA

The http://www.rulesemporium.com/ seems like a great place for this

[brett]

Thank You Brett!!!
I did it and it works. Hopefully it does not make Andrew unhappy

Super! Now that your MOD was successful on the server, could you please paste in your results in here, so I can also see the best way to make it happen for me and my clients? It had been a while since I looked at this stuff.

Do you simply paste this in the user_prefs file? What is LOCAL_DEMONSTRATION_SUBJECT supposed to be?

header LOCAL_DEMONSTRATION_SUBJECT Subject =~ /\btest\b/i
score LOCAL_DEMONSTRATION_SUBJECT 0.1

[mentordas]

Spamassin

Guess I jumped in front of the train before it stopped. It worked for 2 days and then it started allowing my messages but as rejected Spam, making them useless to me. I had to go back and disable Spam Assassin so that I could get all my messages. I just used the filter to redirect my special messages. But Spam is killing me. I need to be able to delete all the Spam before I download my messages. Sorry for the misinformation.

[mkraai]

Here is what I would do.

1. Set SA on, but put the threshhold ridiculously high (like 50 or 100). This will allow all spam through, but add the SA headers, which list the score and all the rules the message triggered.

2. Check the SA headers on the messages you want. It shouldn't be hard to figure out which rule(s) are causing them to be classified as spam. Without knowing the details, I can usually figure out enough from the rule names to know what I need to do.

3. Either:

a. Modify the web form message to not trigger those rules.
- or -
b. Disable some rules by setting their values to zero in your SA user prefs.

You don't have to avoid all rules, just enough to get the score below your usual threshhold.

4. Set your SA threshhold back where it was.

[mentordas]

Spam Assassin

Thanks MKRAAI, That sounds like a plan! I'll try it and report back.

[mentordas]

Spam Assassin

I have been spot-checking the messages I received and found that the Spams were scoring anywhere from 5 to 6.5 hits and up, whereas my non-Spam messages were not doing as well as that scoring over 5 hits. So now I know the SA will not help me. Any ideas?

[felipe808]

use default address to fail

Go to "default Address" and if you select the :fail: option to not allow any eamil unless it has a listed address it will stop almost everything. The spammers are using very small emails that get through SA when they discover using ****@mydomain.com are not rejected. I think . This should make the spam getting through plummet.

[mentordas]

Spam Assassin

That looks worth a try. Thanks

[mkraai]

If the problem is still that messages from your HTML form are being flagged as spam, post at least the SA headers from one of those, and I'll see if I can find something.

The more of the message I can see, the better.

If you don't want to post the details in public, you can PM me.