At 11:27 AM 1/19/2004, Ron Culler wrote:
>I'm having problems with forged headers allowing email with the habeas
>tags.  What is the best way to force a score for habeas tagged email?  I
>use spamassassin with spamd and sql based user black/white lists but a
>common bayes db.

put something similar to this in your /etc/mail/spamassassin/local.cf:

score HABEAS_SWE -1.0

and restart spamd when you are done.

Default is -8.0.. but with the forgeries, many are going to 0.

I'd caution strongly against assigning a positive score, as many people 
(ie: Theo) do use it on most of the mail they send.

I'd also advise noticing that all the SWE abuse so far is from 
pharmacourt.. a simple rule looking for that name in text, and another 
looking for it in a uri goes quite far.

You might also want to look at the antidrug ruleset.

http://mywebpages.comcast.net/mkettler/sa/antidrug.cf

-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn