Hi,
Thanks. I'm still a bit new to configuring all of this (normally I've had it done automatically on a managed server). I've currently got the following setup:
blacklist_from *@*.stream
blacklist_from *@*.link
blacklist_from *@*.click
blacklist_from *@*.science
blacklist_from *@*.study
blacklist_from *@*.download
blacklist_from *@*.top
blacklist_from *@*.accountant
blacklist_from *@*.date
blacklist_from *@*.review
blacklist_from *@*.win
blacklist_from *@*.gdn
blacklist_from *@*.date
blacklist_from *@*.cricket
blacklist_from *@*.xyz
blacklist_from *@*.ninja
blacklist_from *@*.academy
blacklist_from *@*.aaa
blacklist_from *@*.accenture
blacklist_from *@*.accountant
blacklist_from *@*.accountants
blacklist_from *@*.active
blacklist_from *@*.actor
blacklist_from *@*.bid
blacklist_from *@*.faith
blacklist_from *@*reserverchic.com
body LOCAL_MARIJUANA_RULE /Marijuana/i
score LOCAL_MARIJUANA_RULE 4
describe LOCAL_MARIJUANA_RULE Marijuana spam filters
body LOCAL_LOTTERY_RULE /Lottery/i
score LOCAL_LOTTERY_RULE 4
describe LOCAL_LOTTERY_RULE Lottery spam filters
from LOCAL_FROM_BOUNCES_RULE /\@bounces\./i
score LOCAL_FROM_BOUNCES_RULE 4
describe LOCAL_FROM_BOUNCES_RULE bounce email spam filters
body LOCAL_BITLY_RULE /bit.ly/i
score LOCAL_BITLY_RULE 4
describe LOCAL_BITLY_RULE Bit.ly spam filters
body LOCAL_CLICK_HERE_RULE1 /cliquez ici/i
score LOCAL_CLICK_HERE_RULE1 3
describe LOCAL_CLICK_HERE_RULE1 Cliiqueze ico spam filters
body LOCAL_IFCANNOT_RULE /Si vous ne parvenez pas/i
score LOCAL_IFCANNOT_RULE 2
describe LOCAL_IFCANNOT_RULE If you can not spam filters
body LOCAL_CLICK_HERE_RULE2 /click here/i
score LOCAL_CLICK_HERE_RULE2 2
describe LOCAL_CLICK_HERE_RULE2 Click here spam filters
body LOCAL_VER_ONLINE_RULE /consultez la version|voir la version en ligne|consultez-la en ligne|version en ligne/i
score LOCAL_VER_ONLINE_RULE 2
describe LOCAL_VER_ONLINE_RULE Version online spam filters
header LR_SUBJECT_VERY_LONG Subject =~ /.{200}/
describe LR_SUBJECT_VERY_LONG Subject contains a lot of characters
score LR_SUBJECT_VERY_LONG 1.5
header LR_SUBJECT_ANDY Subject =~ /^andy/i
describe LR_SUBJECT_ANDY Subject: starts with Andy
score LR_SUBJECT_ANDY 1
uri LR_URI_NUMERIC_ENDING m|^https?://.+?\d{4,}$|i
describe LR_URI_NUMERIC_ENDING Ends in a number of at least 4 digits
score LR_URI_NUMERIC_ENDING 1
body LOCAL_GO_THIS_PAGE_RULE /rendez-vous sur cette page/i
score LOCAL_GO_THIS_PAGE_RULE 2
describe LOCAL_GO_THIS_PAGE_RULE Go to this page spam filters
uri LR_URI_LC_SUB m|^https?://lc\.|i
describe LR_URI_LC_SUB Has lc as subdomain
score LR_URI_LC_SUB 1
Are there any other obvious one's you would suggest adding? I'm all for the system like SpamHaus to pickup as many of them as possible, but we still seem to get quite a few that get through
Cheers
Andy