spamassassin user_pref problem

icepick

Verified User
Joined
Aug 19, 2005
Messages
112
Location
Auckland, New Zealand
Ok, so i've made a user_pref in /usr/local/directadmin/data/templates/custom and copied this to my users user_pref. It doesnt seem to work.

The whitelist, isnt assigning a -5 score, the additional checks I put in place don't get used, below is my config.

Does anyone else know how I can assign new rules to all users simular to mine to try stop spam.

required_hits |required_hits|
rewrite_subject |rewrite_subject|
subject_tag |subject_tag|
report_safe |report_safe|

|blacklist_from|
|whitelist_from|

required_score |required_hits|
rewrite_header subject |subject_tag|

header LOCAL_RCVD_ISP_WHITELIST rbleval:check_rbl('ispnz-firsttrusted', 'whitelist.unix.co.nz.')
describe LOCAL_RCVD_ISP_WHITELIST NZ ISP Mail Server, See http://www.unix.co.nz/
score LOCAL_RCVD_ISP_WHITELIST -5.0


# Higher scoring for Nigerian scams
score NIGERIAN_BODY1 3
score NIGERIAN_BODY2 2
# Known high-volume spammers that
# I have no interest in hearing from.
body PHARMAWHAREHOUSE /pharmawharehouse.biz/
describe PHARMAWHAREHOUSE Link to pharmawharehouse.biz
body PHARMACOURT /pharmacourt.biz/
describe PHARMACOURT Link to pharmacourt.biz
body VALUEPOINTMEDS /valuepointmeds.biz/
describe VALUEPOINTMEDS Link to valuepointmeds.biz
score PHARMAWHAREHOUSE 10
score PHARMACOURT 10
score VALUEPOINTMEDS 10
body EMAILADVERTISE /emailadvertise.biz/
describe EMAILADVERTISE Link to emailadvertise.biz
score EMAILADVERTISE 10
body ANDROUJICOM /androuji.com/
describe ANDROUJICOM Junk mail from different addresses
score ANDROUJICOM 10
body OSAMACAUGHTURL /Just got this from CNN Osama Bin Laden has just been captured/i
describe OSAMACAUGHTURL Claiming that Osama Bin Laden was caught
score OSAMACAUGHTURL 10
body MONTERYAPPSINC /Largest Selection Of Online Medications/i
describe MONTERYAPPSINC advertising medicine
score MONTERYAPPSINC 10
body MONTERYAPPSINCURL /monteryappsinc.info/
describe MONTERYAPPSINCURL selling goods spam
score MONTERYAPPSINCURL 10
body POCZTAONETPL /poczta.onet.pl/
describe POCZTAONETPL spammed me
score MONTERYAPPSINCURL 10
body CDCISTOCKPROFILE /CDCI/
describe CDCISTOCKPROFILE stock profile spam
score CDCISTOCKPROFILE 2
body CHEAPSOFTWARESPAM /All you will receive is the actual software and your own unique registration code/i
describe CHEAPSOFTWARESPAM Cheap software spam xp etc
score CHEAPSOFTWARESPAM 3
header GERMANSPAM MESSAGEID =~ /^<.*[a-z].*\.qmail\@.*>/
describe GERMANSPAM Contains German Spam
score GERMANSPAM 10 10 10 10
body VIAGRA /Viagra/
describe VIAGRA No one likes Viagra adverts
score VIAGRA 2
body VALIUM /Valium/
describe VALIUM No one wants to know about valium
score VALIUM 1
body SALEPRICETODAY /salepricetoday.com/
describe SALEPRICETODAY we dont want to know about this website
score SALEPRICETODAY 1
body BESTPRICES /best prices/i
describe BESTPRICES Advertising best prices
score BESTPRICES 0.5
body VICODIN /Vicodin/
describe VICODIN No one wants to know about Vicodin
score VICODIN 1
body CIALIS /Cialis/
describe CIALIS No one wants to know
score CIALIS 1
body AMBIEN /Ambien/
describe AMBIEN No one wants to know about ambien
score AMBIEN 1
score CLICK_BELOW 1
body SEXUAL /sexual/
describe SEXUAL Talks about sexual stuff
score SEXUAL 0.5
body MANHOOD /manhood/
describe MANHOOD Talks about manhood
score MANHOOD 0.5
body MALEENHANCE /Male Enhancement/i
describe MALEENHANCE Talks about engancement drugs
score MALEENHANCE 2.5
body CHEMIST /chemist/
describe CHEMIST Talks about chemist
score CHEMIST 0.8
body CYBERCHEMIST /cyber chemist/i
describe CYBERCHEMIST we dont give 2 hoots about their cyber chemist
score CYBERCHEMIST 3

uri SPAMCOP_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0+2')
describe SPAMCOP_URI_RBL Has URI in SC at http://www.surbl.org/lists.html
tflags SPAMCOP_URI_RBL net

uri WS_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0+4')
describe WS_URI_RBL Has URI in WS at http://www.surbl.org/lists.html
tflags WS_URI_RBL net

uri PH_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0+8')
describe PH_URI_RBL Has URI in PH at http://www.surbl.org/lists.html
tflags PH_URI_RBL net

uri OB_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0+16')
describe OB_URI_RBL Has URI in OB at http://www.surbl.org/lists.html
tflags OB_URI_RBL net

uri AB_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0+32')
describe AB_URI_RBL Has URI in AB at http://www.surbl.org/lists.html
tflags AB_URI_RBL net

uri JP_URI_RBL eval:check_spamcop_uri_rbl('multi.surbl.org','127.0.0.0+64')
describe JP_URI_RBL Has URI in JP at http://www.surbl.org/lists.html
tflags JP_URI_RBL net


score SPAMCOP_URI_RBL 4.0
score WS_URI_RBL 1.5
score PH_URI_RBL 3.0
score OB_URI_RBL 2.2
score AB_URI_RBL 3.0
score JP_URI_RBL 2.5


# open redirect resolution off by default
# spamcop_uri_resolve_open_redirects 1

open_redirect_list_spamcop_uri snurl.com *.snurl.com
open_redirect_list_spamcop_uri snipurl.com *.snipurl.com
open_redirect_list_spamcop_uri tinyclick.com *.tinyclick.com
open_redirect_list_spamcop_uri babyurl.com *.babyurl.com
open_redirect_list_spamcop_uri lin.kz *.lin.kz
open_redirect_list_spamcop_uri *.v3.net
open_redirect_list_spamcop_uri shorl.com *.shorl.com
open_redirect_list_spamcop_uri tinyurl.com *.tinyurl.com
open_redirect_list_spamcop_uri xrl.us


# local exclusion list, don't bother checking these URIs, they're clean
whitelist_spamcop_uri *.yahoo.com
whitelist_spamcop_uri *.w3.org
whitelist_spamcop_uri *.msn.com
whitelist_spamcop_uri *.com.com
whitelist_spamcop_uri *.yimg.com
whitelist_spamcop_uri *.hotmail.com
whitelist_spamcop_uri *.doubleclick.com
whitelist_spamcop_uri *.ebaystatic.com
whitelist_spamcop_uri *.aol.com
whitelist_spamcop_uri *.akamai.net
whitelist_spamcop_uri *.yahoogroups.com
whitelist_spamcop_uri *.ebay.com
whitelist_spamcop_uri *.classmates.com
whitelist_spamcop_uri *.akamaitech.com
whitelist_spamcop_uri *.google.com
whitelist_spamcop_uri *.microsoft.com
whitelist_spamcop_uri *.paypal.com
whitelist_spamcop_uri *.amazon.com

# blacklist_spamcop_uri *medz4cheap.com

header PROLO_GSPAM01 Subject =~ /Gegen das Vergessen/i
header PROLO_GSPAM02 Subject =~ /Verbrechen der deutschen Frau/i
header PROLO_GSPAM03 Subject =~ /Dresden Bombing Is To Be Regretted Enormously/i
header PROLO_GSPAM04 Subject =~ /Graeberschaendung auf bundesdeutsche Anordnung/i
header PROLO_GSPAM05 Subject =~ /Deutsche Buerger trauen sich nicht \.\.\./i
header PROLO_GSPAM06 Subject =~ /S\.O\.S. Kiez\! Polizei schlaegt Alarm/i
header PROLO_GSPAM07 Subject =~ /Schily ueber Deutschland/i
header PROLO_GSPAM08 Subject =~ /Massenhafter Steuerbetrug durch auslaendische Arbeitnehmer/i
header PROLO_GSPAM09 Subject =~ /The Whore Lived Like a German/i
header PROLO_GSPAM10 Subject =~ /Transparenz ist das Mindeste/i
header PROLO_GSPAM11 Subject =~ /Volk wird nur zum zahlen gebraucht!/i
header PROLO_GSPAM12 Subject =~ /Trotz Stellenabbau/i
header PROLO_GSPAM13 Subject =~ /Augen auf/i
header PROLO_GSPAM14 Subject =~ /Armenian Genocide Plagues Ankara 90 Years On/i
header PROLO_GSPAM15 Subject =~ /Du wirst ausspioniert \.\.\.\.\!/i
header PROLO_GSPAM16 Subject =~ /Dresden 1945/i
header PROLO_GSPAM17 Subject =~ /Blutige Selbstjustiz/i
header PROLO_GSPAM18 Subject =~ /Turkish Tabloid Enrages Germany with Nazi Comparisons/i
header PROLO_GSPAM19 Subject =~ /Multi-Kulturell \= Multi-Kriminell/i
header PROLO_GSPAM20 Subject =~ /60 Jahre Befreiung: Wer feiert mit?/i
header PROLO_GSPAM21 Subject =~ /Vorbildliche Aktion/i
header PROLO_GSPAM22 Subject =~ /Auf Streife durch den Berliner Wedding/i
header PROLO_GSPAM23 Subject =~ /Tuerkei in die EU/i
header PROLO_GSPAM24 Subject =~ /Paranoider Deutschenmoerder kommt in Psychiatrie/i
header PROLO_GSPAM25 Subject =~ /Hier sind wir Lehrer die einzigen Auslaender/i
header PROLO_GSPAM26 Subject =~ /4\,8 Mill\. Osteuropaeer durch Fischer-Volmer Erlass/i
header PROLO_GSPAM27 Subject =~ /Du wirst zum Sklaven gemacht\!\!\!/i
header PROLO_GSPAM28 Subject =~ /Deutsche werden kuenftig beim Arzt abgezockt/i
header PROLO_GSPAM29 Subject =~ /Auslaenderpolitik/i
header PROLO_GSPAM30 Subject =~ /Auslaender bevorzugt/i

score PROLO_GSPAM01 8
score PROLO_GSPAM02 8
score PROLO_GSPAM03 8
score PROLO_GSPAM04 8
score PROLO_GSPAM05 8
score PROLO_GSPAM06 8
score PROLO_GSPAM07 8
score PROLO_GSPAM08 8
score PROLO_GSPAM09 8
score PROLO_GSPAM10 8
score PROLO_GSPAM11 8
score PROLO_GSPAM12 8
score PROLO_GSPAM13 8
score PROLO_GSPAM14 8
score PROLO_GSPAM15 8
score PROLO_GSPAM16 8
score PROLO_GSPAM17 8
score PROLO_GSPAM18 8
score PROLO_GSPAM19 8
score PROLO_GSPAM20 8
score PROLO_GSPAM21 8
score PROLO_GSPAM22 8
score PROLO_GSPAM23 8
score PROLO_GSPAM24 8
score PROLO_GSPAM25 8
score PROLO_GSPAM26 8
score PROLO_GSPAM27 8
score PROLO_GSPAM28 8
score PROLO_GSPAM29 8
score PROLO_GSPAM30 8

describe PROLO_GSPAM01 German Spam from Sober virus
describe PROLO_GSPAM02 German Spam from Sober virus
describe PROLO_GSPAM03 German Spam from Sober virus
describe PROLO_GSPAM04 German Spam from Sober virus
describe PROLO_GSPAM05 German Spam from Sober virus
describe PROLO_GSPAM06 German Spam from Sober virus
describe PROLO_GSPAM07 German Spam from Sober virus
describe PROLO_GSPAM08 German Spam from Sober virus
describe PROLO_GSPAM09 German Spam from Sober virus
describe PROLO_GSPAM10 German Spam from Sober virus
describe PROLO_GSPAM11 German Spam from Sober virus
describe PROLO_GSPAM12 German Spam from Sober virus
describe PROLO_GSPAM13 German Spam from Sober virus
describe PROLO_GSPAM14 German Spam from Sober virus
describe PROLO_GSPAM15 German Spam from Sober virus
describe PROLO_GSPAM16 German Spam from Sober virus
describe PROLO_GSPAM17 German Spam from Sober virus
describe PROLO_GSPAM18 German Spam from Sober virus
describe PROLO_GSPAM19 German Spam from Sober virus
describe PROLO_GSPAM20 German Spam from Sober virus
describe PROLO_GSPAM21 German Spam from Sober virus
describe PROLO_GSPAM22 German Spam from Sober virus
describe PROLO_GSPAM23 German Spam from Sober virus
describe PROLO_GSPAM24 German Spam from Sober virus
describe PROLO_GSPAM25 German Spam from Sober virus
describe PROLO_GSPAM26 German Spam from Sober virus
describe PROLO_GSPAM27 German Spam from Sober virus
describe PROLO_GSPAM28 German Spam from Sober virus
describe PROLO_GSPAM29 German Spam from Sober virus
describe PROLO_GSPAM30 German Spam from Sober virus
 
Back
Top