Oregon State University uses SpamAssassin to tag inbound email that appears to be spam. You can use these SpamAssassin tags to filter junk mail out of your mailbox.

Headers assigned by SpamAssassin

Example headers that you can filter on:

X-Spam-Flag: YES
X-Spam-Level: ********
(a # of stars indicating the likeliness that this is spam)

When creating a rule in your e-mail program to filter mail based on SpamAssassin tags, you have the choice of either using the "X-Spam-Flag" header, or the "X-Spam-Level" header. The X-Spam-Flag header will be set to YES whenever the message has a SpamAssassin score of 5 or higher. If you would like to catch messages with a score of 3 or more instead, you can create a rule that looks for this header:

X-Spam-Level: ***

How to use SpamAssassin

ONID Users

You can enable SpamAssassin by going to http://onid.oregonstate.edu/. Choose "Login to ONID", and click on "Manage Mail" after you have authenticated.

Microsoft Outlook 2000 & XP:

  • Note: Outlook XP requires you first create a "Blank Rule" and then all of the following apply.
  • Right-click on your "Inbox" and choose "New Folder". Name it "junk".
  • Click Tools then Rules Wizard.
  • A window should pop up, click New.
  • Choose "Check Messages When they Arrive" and click next.
  • Check the box for "With <Specific Words> in the Message header".
  • Click the "specific words" link and enter the following as its shown: X-Spam-Flag: YES
  • Click "move it to the specified folder".
  • Choose the "junk" folder you created in the first step and click OK.
  • Click "Finish" then OK. Your rule should now be set up. DO NOT CLICK NEXT.

Entourage

  • Click Tools then Rules.
  • Select Specific Header as the criteria.
  • Enter the desired trap for the headers.
       Example: X-Spam-Flag: YES Would filter any message that was tagged by our system as "Spam"
  • Click apply.

Eudora 5.X

  • Click on Tools then Filters
  • Click New
  • Highlight the 'untitled' rule you've just created
  • On the right, check Incoming and change HEADER to say <ny Header>
  • Find the pulldown menu that says contains, and change it to matches regexp (case insensitive)
  • Enter X-Spam-Flag: YES on the line next to it.
  • Set first action to Transfer To then Trash. Or any other folder you want to filter the spam to.
  • Set second action to Skip Rest
  • Close box, and say yes when asked to save filters.

Spam-identification tactics used by SpamAssassin

  • Header Analysis: spammers use a number of tricks to mask their identities, fool you into thinking they've sent a valid message, or fool you into thinking you must have subscribed at some stage. SpamAssassin tries to spot these.
  • Text Analysis: Spam messages often have a characteristic style (to put it politely), and some characteristic disclaimers and CYA text. SpamAssassin can spot these, too.
  • Razor: Vipul's Razor is a collaborative spam-tracking database, which works by taking a signature of spam messages. Since spam typically operates by sending an identical message to hundreds of people, Razor short-circuits this by allowing the first person to receive a spam to add it to the database -- at which point everyone else will automatically block it.