Hi Max,
On Wed, February 20, 2013 7:25 pm, Max B wrote:
One rule might be
to delete any 'Received from' headers which contain 'dynamic' in the
domain name. I am unsure whether SpamAssassin knows how to do this.
It can:
http://wiki.apache.org/spamassassin/Rules/RDNS_DYNAMIC
However you must understand that this is not a foolproof binary operation
and so SA would never act on that rule alone (unless you forced it to).
The whole purpose behind a decent anti-spam strategy is that you can't
usually just implement 'if x then ban' approach without a high risk of
false positives and negatives. SA provides a score-based holistic strategy
that can accurately determine 'spaminess' based on a whole variety of
factors and thus can used with a high degree of confidence.
Non-spam can often fail a single test however if a genuine spam is going
to trip over one test it'll usually trip over several. That's how you can
tell them apart. Crude procmail recipes acting on one liners will either
drop mail you want or won't stop mail you don't.
Mathew