help on bulkmail , offers - amavisd.conf file

[Indunil Jayasooriya]

Hi,


I want to study below lines in amavisd.conf file.


new_RE( # regexp-type lookup table, just happens to be all
soft-blacklist
[qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@'i =>
5.0],
[qr'^(greatcasino|investments|lose_weight_today|market\.alert)@'i=>
5.0],
[qr'^(money2you|MyGreenCard|new\.tld\.registry|opt-out|opt-in)@'i=>
5.0],
[qr'^(optin|saveonlsmoking2002k|specialoffer|specialoffers)@'i =>
5.0],
[qr'^(stockalert|stopsnoring|wantsome|workathome|yesitsfree)@'i =>
5.0],
[qr'^(your_friend|greatoffers)@'i =>
5.0],
[qr'^(inkjetplanet|marketopt|MakeMoney)\d*@'i =>
5.0],
),


What does it exactly say?

Let's talk about the first line

[qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@'i => 5.0],

what are these

bulkmail|offers|cheapbenefits|earnmoney|foryou

are these user names of any domain such as

***@anydomain1.com
***@anydomain2.com

***@anydomain1.com
***@anydomain2.com

or

or any username having word bulkmail , offers

*bulkmail*@anydomain1.com
*bulkmail*@anydomain1.com

*offers*@anydomain1.com
*offers*@anydomain2.com


they get Positive 5. (Also case insensitive due to "*@i* " )


or

Subject or body containing words such as* bulkmail , offers* and so on
listed there?


Hope to hear from you.

[Dino Edwards]

It will match any of those keywords whether its’ part of the email, subject, body etc..

Take a look here:

https://regex101.com/r/bQ1xB0/3

Try any of the possibilities you listed and you will get a match.



From: amavis-users [mailto:amavis-users-bounces+dino.edwards=***@amavis.org] On Behalf Of Indunil Jayasooriya
Sent: Thursday, March 03, 2016 12:16 AM
To: amavis-***@amavis.org
Subject: help on bulkmail , offers - amavisd.conf file

Hi,

I want to study below lines in amavisd.conf file.

new_RE( # regexp-type lookup table, just happens to be all soft-blacklist
[qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@'i => 5.0],
[qr'^(greatcasino|investments|lose_weight_today|market\.alert)@'i=> 5.0],
[qr'^(money2you|MyGreenCard|new\.tld\.registry|opt-out|opt-in)@'i=> 5.0],
[qr'^(optin|saveonlsmoking2002k|specialoffer|specialoffers)@'i => 5.0],
[qr'^(stockalert|stopsnoring|wantsome|workathome|yesitsfree)@'i => 5.0],
[qr'^(your_friend|greatoffers)@'i => 5.0],
[qr'^(inkjetplanet|marketopt|MakeMoney)\d*@'i => 5.0],
),

What does it exactly say?

Let's talk about the first line

[qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@'i => 5.0],
what are these

bulkmail|offers|cheapbenefits|earnmoney|foryou
are these user names of any domain such as

***@anydomain1.com<mailto:***@anydomain1.com>
***@anydomain2.com<mailto:***@anydomain2.com>

***@anydomain1.com<mailto:***@anydomain1.com>
***@anydomain2.com<mailto:***@anydomain2.com>
or

or any username having word bulkmail , offers

*bulkmail*@anydomain1.com<http://anydomain1.com>
*bulkmail*@anydomain1.com<http://anydomain1.com>

*offers*@anydomain1.com<http://anydomain1.com>
*offers*@anydomain2.com<http://anydomain2.com>

they get Positive 5. (Also case insensitive due to "@i " )

or

Subject or body containing words such as bulkmail , offers and so on listed there?

Hope to hear from you.

[@lbutlr]

Yes. This is the section that starts with the comment:

# ENVELOPE SENDER SOFT-WHITELISTING / SOFT-BLACKLISTING

@score_sender_maps = ({

Post by Indunil Jayasooriya
or any username having word bulkmail , offers

Yes.

Post by Indunil Jayasooriya
Subject or body containing words such as bulkmail , offers and so on listed there?

No, this is only looking at the sender.