From: "James Wilkinson" <fedora@xxxxxxxxxxxxxxxxxx>
Tim wrote (about SpamAssassin flagging .biz domains):
Yes, in that message, though in practice the entire message was parsed.
Any mention of one gets detected.
My main beef with it has been not that it uses it as a "slightly higher
rating", but that it flags it *as* spam, outright. On the basis that an
e-mail came from that domain, or mentions a URI inside it with it, it'd
be flagged as BEING spam. So, completely NON spam e-mail was getting
dumped, carte blanche. Often recipients were completely unaware of
this.
I'm not sure which version of SpamAssassin you're talking about, nor yet
which rulesets are enabled. But that doesn't sound right -- normally, a
spam will have to trigger a number of rules before SpamAssassin will
mark it as spam.
In the current 3.1.7:
score BIZ_TLD 1.719 1.169 2.035 2.013
uri BIZ_TLD /\.biz(?::\d+)?(?:\/|$)/i
describe BIZ_TLD Contains an URL in the BIZ top-level domain
score INFO_TLD 1.373 0.813 1.457 1.273
uri INFO_TLD /\.info(?::\d+)?(?:\/|$)/i
describe INFO_TLD Contains an URL in the INFO top-level domain
The scores vary on whether you've got "network" tests (i.e. blacklists)
and Bayesian testing turned on.
By default, one will need a score of 5 before a spam is marked as spam.
SpamAssassin *doesn't* currently score on mail (allegedly) *from* a .biz
domain (I've got plenty, thanks, and there's no mention of SpamAssassin
scoring on it).
http://www.rulesemporium.com/ is your dearest and best friend for adding
additional rules to SpamAssassin.
{^_^}
