# SpamAssassin sample procmailrc
#
# Pipe the mail through spamassassin (replace 'spamassassin' with 'spamc'
# if you use the spamc/spamd combination)
# The condition line ensures that only messages smaller than 250 kB
# (250 * 1024 = 256000 bytes) are processed by SpamAssassin. Most spam
# isn't bigger than a few k and working with big messages can bring
# SpamAssassin to its knees.
:0fw
* < 256000
| /home/admispconfig/ispconfig/tools/spamassassin/usr/bin/spamassassin --prefs-file=/var/www/web2/user/web3_xxx/.user_prefs
# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
:0:
* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*
/dev/null
# All mail tagged as spam (eg. with a score higher than the set threshold)
# is moved to "/dev/null".
:0:
* ^X-Spam-Status: Yes
/dev/null
# Work around procmail bug: any output on stderr will cause the "F" in "From"
# to be dropped. This will re-add it.
:0
* ^^rom[ ]
{
LOG="*** Dropped F off From_ header! Fixing up. "
:0 fhw
| sed -e '1s/^/F/'
}
From - Tue May 05 15:50:52 2009
X-Account-Key: account8
X-UIDL: UID2396-1239029415
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:
Received: from localhost by ovz2.z-com.de
with SpamAssassin (version 3.2.5);
Tue, 05 May 2009 15:47:43 +0200
From: "Angeline Calderon" <darlene66@lumenton.com>
To: <xxx@xxx-hmk.de>
Subject: ***SPAM*** While you arereading this a lot of clients are purchasing
Date: Tue, 5 May 2009 10:49:14 -0300
Message-Id: <000d01c9cd88$4712cab0$6400a8c0@darlene66>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on ovz2.z-com.de
X-Spam-Level: **************************
X-Spam-Status: Yes, score=26.2 required=5.0 tests=FH_HELO_EQ_D_D_D_D,
HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,RCVD_IN_PBL,
RCVD_IN_SORBS_DUL,RDNS_DYNAMIC,TVD_RCVD_IP,URIBL_AB_SURBL,URIBL_BLACK,
URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL autolearn=spam
version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4A00437F.547E7C91"
This is a multi-part message in MIME format.