LinuxQuestions.org - DISCUSSION: Stop More Spam

Here's a small script I wrote for automatically fetching and updating some SA rule files that update often. It's nice to keep these rule files up to date because as we know, spammers are finding new ways to outsmart spam filters on a daily basis.

I add this script to my daily cron jobs.

Code:

#!/bin/sh



# adam@foogazi.com

# http://www.foogazi.com



# DO NOT IMPLEMENT THIS WITHOUT CHOOSING WHICH RULES TO USE AND DECIDING IF THEY WILL BE OF BENEFIT OR NOT.

# This script was created on a Slackware 10.0 machine.



# Implementing:

# CONFIG_PATH should be changed to the path of your local.cf file

# BACKUP_PATH should be changed to the path you want files to be backed up to - this path must be present before executing # this script.

# SCRIPT_PATH should be changed to the location of your spamd init script, used to start/restart spamassassin.





CONFIG_PATH=/etc/mail/spamassassin

BACKUP_PATH=/etc/mail/spamassassin/backup

SCRIPT_PATH=/etc/rc.d/rc.spamd



# Back up the current configs



cd $CONFIG_PATH

cp * $BACKUP_PATH



# Stop spamassassin

$SCRIPT_PATH stop



rm *.*



#Download rules:

# Uncomment the rules you want - see http://www.rulesemporium.com/ for more info.

# NOTE: You must uncomment at least one for this to work.



#wget http://www.rulesemporium.com/rules/70_sare_stocks.cf



#wget http://mywebpages.comcast.net/mkettler/sa/antidrug.cf



#wget http://www.emtinc.net/includes/backhair.cf



#wget http://www.timj.co.uk/linux/bogus-virus-warnings.cf



#wget http://www.sa-blacklist.stearns.org/sa-blacklist/sa-blacklist.current.uri.cf



#wget http://www.emtinc.net/includes/chickenpox.cf



#wget http://www.rulesemporium.com/rules/72_sare_redirect_post3.0.0.cf



#wget http://www.rulesemporium.com/rules/70_sare_evilnum0.cf



#wget http://www.rulesemporium.com/rules/70_sare_evilnum1.cf



#wget http://www.rulesemporium.com/rules/70_sare_evilnum2.cf



#wget http://www.rulesemporium.com/rules/70_sare_html.cf



#wget http://www.rulesemporium.com/rules/70_sare_html4.cf



#wget http://www.rulesemporium.com/rules/70_sare_html_arc.cf



#wget http://www.rulesemporium.com/rules/70_sare_html_eng.cf



#wget http://www.rulesemporium.com/rules/70_sare_bayes_poison_nxm.cf



#wget http://www.ccert.edu.cn/spam/sa/Chinese_rules.cf



#wget http://www.geewhiz.ca/images/b/b2/99_geewhizg_zh.cf



#wget http://www.geewhiz.ca/images/3/35/50_scores_geewhizg_zh.cf



#wget http://www.nospamtoday.com/download/mime_validate.cf



#wget http://www.rulesemporium.com/rules/70_sare_bayes_poison_nxm.cf



#wget http://www.sa-blacklist.stearns.org/sa-blacklist/random.current.cf



#wget http://www.rulesemporium.com/rules/99_FVGT_Tripwire.cf



#wget http://maxime.ritter.eu.org/Spam/french_rules.cf



#wget http://www.rulesemporium.com/rules/70_sare_header0.cf



#wget http://www.rulesemporium.com/rules/70_sare_specific.cf



#wget http://www.rulesemporium.com/rules/70_sare_ratware.cf



#wget http://www.rulesemporium.com/rules/70_sare_adult.cf



#wget http://www.rulesemporium.com/rules/72_sare_bml_post25x.cf



#wget http://www.rulesemporium.com/rules/99_sare_fraud_post25x.cf



#wget http://www.rulesemporium.com/rules/70_sare_spoof.cf



#wget http://www.rulesemporium.com/rules/70_sare_random.cf



#wget http://www.rulesemporium.com/rules/70_sc_top200.cf



#wget http://www.rulesemporium.com/rules/70_sare_oem.cf



#wget http://www.rulesemporium.com/rules/70_sare_genlsubj.cf



#wget http://www.rulesemporium.com/rules/70_sare_highrisk.cf



#wget http://www.rulesemporium.com/rules/70_sare_unsub.cf



#wget http://www.rulesemporium.com/rules/70_sare_uri0.cf



#wget http://www.rulesemporium.com/rules/70_sare_whitelist.cf



cp $BACKUP_PATH/local.cf .

cp $BACKUP_PATH/init.pre .

cp $BACKUP_PATH/rolex.cf .

cp $BACKUP_PATH/stock.cf .

cp $BACKUP_PATH/v310.pre .



# Start Spamassassin

$SCRIPT_PATH start

Side note:
Jeremy, fix: "...additional SA rules. he best place for this is http://www.rulesemporium.com/, .."

Nice article!