Hi


I have some doubts:

First, how can I insert more detailed info for SCANINFO on 
"Qmail-Scanner Quarantine Envelope" ?
I  would like to save all  "Content analysis details"  on quaratined 
e-mail...


Second,

This not always happen, but sometimes I got this:

this is  a spam in my quarantine folder (quarantined by 
qmail-scanner+spamd)

<snip>
*** Qmail-Scanner Quarantine Envelope Details Begin ***
<snip>
spamassassin: 3.1.7.  SPAM Found. Processed in 2.719401 secs)
Quarantine-Description: SPAM content refused by this network (5.8/5.0)
*** Qmail-Scanner Envelope Details End **

But, if I run "spamc -R < quarantined_email", spamassin reports only 2.8 
hits for the same message...  (hist only by spamd)

Content analysis details:   (2.8 points, 5.0 required)

pts rule name              description
---- ---------------------- 
--------------------------------------------------
1.1 EXTRA_MPART_TYPE       Header has extraneous Content-type:...type= 
entry
1.2 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of words
2.1 TVD_FW_GRAPHIC_ID1     BODY: TVD_FW_GRAPHIC_ID1
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                          [score: 0.0000]
0.0 HTML_MESSAGE           BODY: HTML included in message
1.0 PART_CID_STOCK         Has a spammy image attachment (by Content-ID)


Why this happens ?? How can I use sa-learn in this cases??





-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to