Normalne maile są wysyłane przy pomocy programów pocztowych ewentualnie stron WWW. newslettery i spam wysyłane są przez różne narzędzia. Spamerzy maja swoje ulubione narzędzia dzięki którym można nieraz wychwycić, ze to spam przy pomocy nagłówka X-mailer. Nie ma co filozofować oto reguły. Punktacja taka jest bezpieczna na wypadek gdyby to był oczekiwany newsletter. A spam dobierze punkty z innych reguł. Tu są wymienione wszystkie ciekawe chociaż część z nich występuje sporadycznie.
header ZABOJCASPAMU_XMAILER_428134 X-Mailer=~/4.2.8-134 \[Aug 22 2012/ describe ZABOJCASPAMU_XMAILER_428134 Send by X-Mailer 4.2.8-134 [Aug score ZABOJCASPAMU_XMAILER_428134 4 header ZABOJCASPAMU_XMAILER_TIDEPLATFORM X-Mailer=~/TidePlatform/ describe ZABOJCASPAMU_XMAILER_TIDEPLATFORM Send by TidePlatform score ZABOJCASPAMU_XMAILER_TIDEPLATFORM 4 header ZABOJCASPAMU_XMAILER_PROROUSERVICE X-Mailer=~/Professional Routing Service/ describe ZABOJCASPAMU_XMAILER_PROROUSERVICE Send by Professional Routing Service score ZABOJCASPAMU_XMAILER_PROROUSERVICE 4 header ZABOJCASPAMU_XMAILER_aspNetEmail X-Mailer=~/aspNetEmail/ describe ZABOJCASPAMU_XMAILER_aspNetEmail Send by X-Mailer aspNetEmail score ZABOJCASPAMU_XMAILER_aspNetEmail 4 header ZABOJCASPAMU_XMAILER_MS X-Mailer=~/^Microsoft Office Outlook, Build 11.0.5510/ describe ZABOJCASPAMU_XMAILER_MS Send by Microsoft Office Outlook, score ZABOJCASPAMU_XMAILER_MS 1 header ZABOJCASPAMU_XMAILER_iMTA X-Mailer=~/iMTA/ describe ZABOJCASPAMU_XMAILER_iMTA Send by Xmailer iMTA score ZABOJCASPAMU_XMAILER_iMTA 4 header ZABOJCASPAMU_XMAILER_Ajaxel_CMS X-Mailer =~ /^\s*Ajaxel CMS v\d+\.\d+ describe ZABOJCASPAMU_XMAILER_Ajaxel_CMS Message from Ajaxel CMS (DSPAM_autolearn), score ZABOJCASPAMU_XMAILER_Ajaxel_CMS 3.5 header ZABOJCASPAMU_XMAILER_SendBlaster X-Mailer =~ /^\s*SendBlaster\.\d+\.\d+\.\d+$/ describe ZABOJCASPAMU_XMAILER_SendBlaster Email marketing mailing software SendBlaster score ZABOJCASPAMU_XMAILER_SendBlaster 3.5 header ZABOJCASPAMU_XMAILER_SMART_SEND_2 X-Mailer =~ /^\s*(SmartSend|Smart_Send).\d.\d.\d/ describe ZABOJCASPAMU_XMAILER_SMART_SEND_2 Suspicious X-Mailer: SmartSend score ZABOJCASPAMU_XMAILER_SMART_SEND_2 4.0 header ZABOJCASPAMU_SPAMWARE_XMAILER_iBriteMail X-Mailer =~ /^\s*(iBriteMail .+)$/ describe ZABOJCASPAMU_SPAMWARE_XMAILER_iBriteMail SPAMWARE X-Mailer (DSPAM_autolearn) score ZABOJCASPAMU_SPAMWARE_XMAILER_iBriteMail 3.0 header ZABOJCASPAMU_SPAMWARE_XMAILER_MMailer X-Mailer =~ /^\s*MMailer v3\.[01]$/ describe ZABOJCASPAMU_SPAMWARE_XMAILER_MMailer SPAMWARE X-Mailer MMailer (DSPAM_autolearn) score ZABOJCASPAMU_SPAMWARE_XMAILER_MMailer 5.0 header ZABOJCASPAMU_SPAMWARE_XMAILER_eMailink X-Mailer =~ /^\s*eMailink 3$/ describe ZABOJCASPAMU_SPAMWARE_XMAILER_eMailink SPAMWARE X-Mailer (DSPAM_autolearn) score ZABOJCASPAMU_SPAMWARE_XMAILER_eMailink 3.0 header ZABOJCASPAMU_SPAMWARE_XMAILER_GOOD_Mailer X-Mailer =~ /^\s*GOOD Mailer v\d+\.\d+$/ describe ZABOJCASPAMU_SPAMWARE_XMAILER_GOOD_Mailer SPAMWARE X-Mailer GOOD Mailer score ZABOJCASPAMU_SPAMWARE_XMAILER_GOOD_Mailer 3.0 header ZABOJCASPAMU_XMAILER_mLogic X-Mailer =~ /^\s*mLogic$/ describe ZABOJCASPAMU_XMAILER_mLogic Strange X-Mailer mLogic (DSPAM_autolearn) score ZABOJCASPAMU_XMAILER_mLogic 5.0 header ZABOJCASPAMU_XMAILER_Default X-Mailer =~ /^\s*Default$/ describe ZABOJCASPAMU_XMAILER_Default Suspicious X-Mailer Default score ZABOJCASPAMU_XMAILER_Default 4.0 header ZABOJCASPAMU_XMAILER_STREAMSEND X-Mailer =~ /^\s*StreamSend/ describe ZABOJCASPAMU_XMAILER_STREAMSEND Message from Email Marketing Solutions score ZABOJCASPAMU_XMAILER_STREAMSEND 0.5 header ZABOJCASPAMU_XMAILER_Vladium X-Mailer =~ /Vladium/ describe ZABOJCASPAMU_XMAILER_Vladium Suspicious X-Mailer Vladium score ZABOJCASPAMU_XMAILER_Vladium 4.0 header ZABOJCASPAMU_XMAILER_NeoFm X-Mailer =~ /NeoFm/ describe ZABOJCASPAMU_XMAILER_NeoFm Suspicious X-Mailer NeoFm score ZABOJCASPAMU_XMAILER_NeoFm 4.0 header ZABOJCASPAMU_XMAILER_Oracle X-Mailer =~ /Oracle Communications Messenger/ describe ZABOJCASPAMU_XMAILER_Oracle Zawiera X-Mailer Oracle Communications Messenger score ZABOJCASPAMU_XMAILER_Oracle 1
Czy możesz skrócić nazwę reguły „ZABOJCASPAMU_SPAMWARE_XMAILER_GOOD_Mailer”, ponieważ spamassasin zwraca ostrzerzenie?
warn: config: warning: rule name ‚ZABOJCASPAMU_SPAMWARE_XMAILER_GOOD_Mailer’ is over 40 chars (recommended maximum length is 22 characters)
Hmm, dziwne. ale jakso uda sie pewnei skrocic