#
# SpamAssassin site-local configuration file.
#
# $Cambridge: hermes/conf/spamd/etc/local.cf,v 1.47 2008/07/31 10:35:09 fanf2 Exp $
#

# The format of the spam reports used in the X-Cam-SpamDetails header
# and in the 550 rejection message.
#
clear_unsafe_report_template
clear_report_template
report score _SCORE_ from SpamAssassin-_VERSION_ _REPORT_

# Compensate for messages with subject of PhD
#
header   __SUBJECT_PHD		Subject =~ /\bPhD\b/
meta     SUBJECT_PHD		__SUBJECT_PHD && TVD_SPACED_SUBJECT_WORD3
score    SUBJECT_PHD		-2.802 -3.599 -2.276 -2.412

# Use the JANET mirror of the Spamhaus lists instead of the public ones.
#
header __RCVD_IN_ZEN            eval:check_rbl('zen', 'zen.dnsbl.ja.net.')
header   RCVD_IN_XBL            eval:check_rbl('zen-lastexternal', 'zen.dnsbl.ja.net.', '127.0.0.[45678]')
header   RCVD_IN_PBL            eval:check_rbl('zen-lastexternal', 'zen.dnsbl.ja.net.', '127.0.0.1[01]')
uridnsbl URIBL_SBL              sbl.dnsbl.ja.net. TXT

# Use the JANET MAPS RBL+ mirror.
#
header   RCVD_IN_MAPS_RBL       eval:check_rbl('rblplus', 'rbl-plus.mail-abuse.ja.net.', '1')
header   RCVD_IN_MAPS_DUL       eval:check_rbl('rblplus-lastexternal', 'rbl-plus.mail-abuse.ja.net.', '2')
header   RCVD_IN_MAPS_RSS       eval:check_rbl_sub('rblplus', '4')
header   RCVD_IN_MAPS_OPS       eval:check_rbl_sub('rblplus', '8')
describe RCVD_IN_MAPS_RBL       Relay in OPS, http://www.mail-abuse.com/enduserinfo_rbl.html
describe RCVD_IN_MAPS_DUL       Relay in OPS, http://www.mail-abuse.com/enduserinfo_dul.html
describe RCVD_IN_MAPS_RSS       Relay in OPS, http://www.mail-abuse.com/enduserinfo_rss.html
describe RCVD_IN_MAPS_OPS       Relay in OPS, http://www.mail-abuse.com/enduserinfo_ops.html
tflags   RCVD_IN_MAPS_OPS       net
#
# Scores are a rough guess.
score    RCVD_IN_MAPS_RBL	0 2.0 0 2.0
score    RCVD_IN_MAPS_DUL	0 1.0 0 1.0
score    RCVD_IN_MAPS_RSS	0 1.0 0 1.0
score    RCVD_IN_MAPS_OPS	0 3.0 0 3.0

# If your root filesystem is filling up because SpamAssassin is putting
# large databases in /.spamassassin or /root/.spamassassin, you can move
# them using the following lines to point to their new locations
#
#auto_whitelist_path		/var/spool/spamassassin/auto-whitelist
#auto_whitelist_file_mode	0644
#bayes_path			/var/spool/spamassassin/bayes
#bayes_file_mode		0644

# By default don't prefer any particular locales, owing to foreign
# students.
#
ok_locales			all

# We do some SMTP-time blacklist checking in Exim, and let
# SpamAssassin handle the other lists for annotation purposes
# rather than full-on blocking.
#
skip_rbl_checks			0

# This seems to be a thoroughly bad idea.
#
use_auto_whitelist		0

# Don't do DNS blacklist checking for hosts on the CUDN
# or intramail networks, and trust their Received: lines.
# These are also considered "internal" for the purpose of
# detecting direct-to-mx spam.
#
clear_trusted_networks
clear_internal_networks
trusted_networks		131.111.0.0/16
trusted_networks		129.169.0.0/16
trusted_networks		128.232.0.0/16
trusted_networks		192.18.195.0/24
trusted_networks		192.84.5.0/24
trusted_networks		192.153.213.0/24
trusted_networks		193.60.80/20
trusted_networks		193.63.252.0/23
trusted_networks		172.16.0.0/12
trusted_networks		192.168.0.0/16

# We need to set these to reduce the negative impact of a DNS
# blacklist or other Internet spam database going tits-up.
#
#dcc_timeout			5
rbl_timeout			5
razor_timeout			5
pyzor_timeout			5

# Configuration for assistant software
#
razor_config		/opt/spamd/etc/razor/razor-agent.conf
#dcc_path		/opt/dcc/bin/dccproc
#dcc_dccifd_path	/var/spool/dcc/dccifd

# Not ready for this yet.
#
use_bayes			0

# If we use the bayesian training, we should ignore locally-added headers.
#
bayes_ignore_header		X-Cam-AntiVirus
bayes_ignore_header		X-Cam-SpamDetails
bayes_ignore_header		X-Cam-SpamScore
bayes_ignore_header		X-Cam-ScannerAdmin

# EOF