Spam Assassin

[LisaJill]

This is the first time I've had spam assassin available to me, so apologies if I seem a little bit confused on this. I've wanted it for a long time but it simply wasn't possible.

 

I have just spent a lot of time reading the spamassassin wiki and documentation and I'm sure it's there and I'm just blind, but I can't find it.

 

Beause my site is mostly a weblog, I get a fair few comments from unpredictable addresses (i like it when that happens =)) so I can't whitelist (consistently) based off domain or email address.

 

An example is this, which did go to the enabled spam box, and I caught it....:

 

From: random@emailaddress.com (name changed to protect the gu... innocent)

To: me

Subject: [distant, early morning: photoblog]New Comment Posted to '17 years old'

 

All of these messages have certain keywords in the subject being "distant, early morning"

 

... I added the keywords to the whitelist_from - but I believe I've done that in error, that being meant to be a from field in an email.

 

Can someone tell me in dumbspeak how to stop filters based off certain keywords in a subject?

 

Thank you. =)

[schussat]

Hi Lisa-

 

I came up with this tip for whitelisting by subject (just googled around for a few minutes):

 

> header WWW_SUBMISSION Subject =~ /^WWW Submission$/
 score WWW_SUBMISSION -20

 

You can add lines like this to ~/.spamassassin/user_prefs, via file manager. So, in your case, you could probably do something like:

 

>header WEBLOG_MAIL Subject =~ /distant/
score WEBLOG_MAIL -20

header WEBLOG_MAIL2 Subject =~ /early warning/
score WEBLOG_MAIL -20

 

With those lines in your user_prefs file, spamassassin should look for "distant" and "early warning" in the subject lines. If if finds either, it should subtract 20 from the spam score, and the email should get passed through. Of course, if spammers use the word "distant" in their subject lines, their email will pass, too, so you might have to tune this a little bit. But this should get you started!

 

-Alan

[LisaJill]

It was 4am, i forgot about Google. That's my excuse...

 

You're a rush fan =) A lot of Rush fans end up reading my sites name as distant early warning *giggles* - I'm a rush fan too, and I'm well aware of the closeness, but it was not intended.

 

Thank you for the guide! I'm going to implement this, it should help a lot. I was thinking about that conundrum about how it may let people get around the filters, but sometimes we have to make concessions to get what we need? I'll fiddle with it though, I'm sure I can come to some kind of compromise. =)

 

Thank you again!

 

-Lisa

[schussat]

You're a rush fan =) A lot of Rush fans end up reading my sites name as distant early warning *giggles* - I'm a rush fan too, and I'm well aware of the closeness, but it was not intended.

Doh! I hadn't even realized I had rewritten "morning"' to "warning."

 

-Alan