The BCI provides customers, from Olter 12 years, its know-how (knowledge) on any computer problems that may occur in the company. Having as a strong point of the constant training on new technologies and business needs, we can be a useful reference point to disentangle in the ever more rapidly changing information technology. |
| How to easily write spamassassin's rules |
|
|
|
|
SpamAssassin is a sotfware which is usually used by administrators of mail servers to filter / tagging the mail in transit by using algorithms to calculate the probability. Write simple rules to assign a score based on the classic pattern matching is a snap. http://wiki.apache.org/spamassassin/WritingRules Position yourself to / etc / spamassassin (or the dir containing the file local.cf) and create an empty text file called eg XX_yourrole.cf 15_myroles.cf Start by entering a few rules for Match of the most common items of postal banking phishing header LOCAL_ET_PHISHINGAB ALL =~ /Nuovi servizi online di Poste.it/i header LOCAL_ET_PHISHINGAC ALL =~ /Comunicazione nr. [0-9]{1,} del [0-9]{2} [a-zA-Z]{1,} [0-9]{4}/i
header LOCAL_ET_PHISHINGAD ALL =~ /Comunicazione Nr_0X[ABCDEF0-9]{2}.0X[ABCDEF0-9]{2}.0X[ABCDEF0-9]{2}.0X[ABCDEF0-9]{2} del [0-9]{2} [a-zA-Z]{1,} [0-9]{4} - Leggere con attenzione/i
The inizia con i caratteri “nr_0x” ed è seguita da due caratteri compresi nell'elenco fra le parentesi quadre (in questo caso facenti parte dell'insieme dei caratteri utilizzati per la rappresentazione esadecimale). begins with the characters "nr_0x" and is followed by two characters listed between the brackets (in this case part of the character used to represent hexadecimal).
Considerazioen next example looks at where you want to assign a positive score to messages containing a string generic constant (stick) preceded by possible strings x which determine uniquely the context spam header LOCAL_ET_SUBJECTA ALL =~ /(Very-very magic|Joy|Long|Super|Enjoy with you hard).*stick/ header LOCAL_ET_SUBJECTA ALL = ~ / (Very-very magic | Joy | Long | Super | Enjoy with you hard) .* stick /
In this case block "stick" would be a bit 'too narrowly, creating better regexp targeted. If the spammer uses algorithms to generate email for example online casino can easily bypassing them with a regexp type
Before relaod your new ruleset is syntactically correct check that your new file. Cf with
|














