On Sun, 2006-01-29 at 14:30, Philip Prindeville wrote:
> Les Mikesell wrote:
> 
> >I reject values that can only be reached by my local settings
> >for viagra/porn, and send the rest through with the score
> >value arranged for easy individual filtering (the asterisk list
> >as the first thing in the header).
> >
> 
> Can you post your configs and diffs?

I don't think anyone would want to duplicate it exactly, but
sa-mimedefang.cf has things like:
whitelist_from *.microsoft.com
and
score ADULT_SITE 100
score SUBJ_VIAGRA 100

and mimedefang-filter has
sub filter_end ($) {
    my($entity) = @_;
                                                                                    return if message_rejected();
                                                                                 # Spam checks if SpamAssassin is installed
     if ($Features{"SpamAssassin"} && !relayIsTrusted($RelayAddr)) {
        if (-s "./INPUTMSG" < 100*1024) {
            # Only scan messages smaller than 100kB.  Larger messages
            # are extremely unlikely to be spam, and SpamAssassin is
            # dreadfully slow on very large messages.
            my($hits, $req, $names, $report) = spam_assassin_check();
            my($score);
            if ($hits < 40) {
                $score = "*" x int($hits);
            } else {
                $score = "*" x 40;
            }
## drop if SA score over 100
            if ($hits > 100) {
                md_graphdefang_log('spam', $hits, $RelayAddr);
                md_syslog('warning', "Discarding because of spam score
hits");
                action_bounce("Message screened as spam, please
rephrase");
                return action_discard();
            }

            if ($hits >= $req) {
                action_change_header("X-Spam-Score", "$hits ($score)
$names");
### note local header here with *'s only
                action_change_header("X-FS-Spam-Score", "$score");
                md_graphdefang_log('spam', $hits, $RelayAddr);
                action_add_part($entity, "text/plain", "-suggest",
                                "$report\nX-FS-Spam-Score: $score",
                                "SpamAssassinReport.txt", "inline");
            } else {
                # Delete any existing X-Spam-Score header?
                action_delete_header("X-Spam-Score");
            }
        }
    }
                                                                                
The relyIsTrusted subroutine was posted by someone a long time ago and
contains a list of local addresses where the spam scan can be skipped.

-- 
  Les Mikesell
   les@futuresource.com







