[Dovecot] A Dovecot Sieve spam filter question.

[Andrzej Adam Filip]

"Kirill Miazine" <km at krot.org> wrote:
> * aja-lists at tni.org [2009-12-30 21:41]:
>> On 12/30/2009 08:30 PM, Andrzej Adam Filip wrote:
>> > aja-lists at tni.org wrote:
>> >> I'd like to make a filtering threshold for users to let them
>> >> deal with spamassassin spam-level starred<  8 themselves,
>> >> but spam-level starred higher than 8 should be discarded
>> --- cut ---
>> > Try the following:
>> >
>> > if header :contains "X-Spam-Level" "*****" {
>> 
>> Thanks,
>> I've just tested that with the gtube spam test,
>> ( which gives this amount of stars :
>> X-Spam-Level: ************************************************** )
>> 
>> and the email ends up in the inbox.
>
> Don't use
>
>   fileinto "discard";
>
> to discard message. You're telling the server to deliver message to
> folder "discard" and it can't find it and so deliveres to INBOX.
>
> Try
>
> if header :contains "X-Spam-Level" "*****" {
>   discard;
>   stop;
> }

I would recommend delivery to special folder with auto-expire 
(e.g. set to 2-4 weeks) instead of discarding.

I have seen (a few years ago) VERY HIGH SpamAssassin scores when on 
some mailing list there had been discussion about DNS domain used by 
"ugly spammer".

http://en.wikipedia.org/wiki/Shit_happens

-- 
[pl>en: Andrew] Andrzej Adam Filip : anfi at onet.eu
If you hype something and it succeeds, you're a genius -- it wasn't a hype.  
If you hype it and it fails, then it was just a hype.
  -- Neil Bogart