Re: [SAtalk] FP with backhair

2004-01-15 Thread Martin Radford
At Wed Jan 14 19:38:33 2004, Gary Funck wrote: > > For the purposes of these tests how is "textual parts" defined? For example, > in a multipart/alternative, would the tests be run both on the text part and > the html part? Which MIME types are classified as text? Just for clarity, > if someone a

Re: [SAtalk] FP with backhair

2004-01-15 Thread Rolf Kraeuchi
Seems like any attachment, especially a binary such as a pdf would go over the maximum size to be scanned by SA. This must have been one tiny pdf, or you have set your SA instance to scan messages over the max size (default 250k) Most pdf's are much larger than this. i believe he attached it

RE: [SAtalk] FP with backhair

2004-01-14 Thread Gary Funck
> > > > Got my first false positive :-/ > > Backhair scored on a .pdf... > > Any hints how to avoid these? > > > > > > X-Spam-Status: Yes, hits=12.0 tagged_above=3.0 required=5.3 > > tests=J_BACKHAIR_11, J_BACKHAIR_12, J_BACKHAIR_13, J_BACKHAIR_14, > > J_BACKHAIR_21, J_BACKHAIR_22, J_BACKHAIR

Re: [SAtalk] FP with backhair

2004-01-14 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Kettler writes: > At 01:44 PM 1/14/2004, Gary Funck wrote: > >I'd asked this before (with no answer on the 'dev' list), > > Not surprising.. unless it's part of active development work ie: discussion > of methods to fix a bug, coding, test resu

RE: [SAtalk] FP with backhair

2004-01-14 Thread Gary Funck
Matt replied (in part): > > >I thought it was only supposed to scan text/html attachments? > > I've never heard anyone claim such. > Here's what the current docs. say: body SYMBOLIC_TEST_NAME /pattern/modifiers Define a body pattern test. pattern is a Perl regular expression. The 'body' in this

Re: [SAtalk] FP with backhair

2004-01-14 Thread Chr. von Stuckrad
On Wed, Jan 14, 2004 at 10:39:15AM -0800, Andreas Stollar wrote: > Seems like any attachment, especially a binary such as a pdf would go over > the maximum size to be scanned by SA. This must have been one tiny pdf, or > you have set your SA instance to scan messages over the max size (default > 25

RE: [SAtalk] FP with backhair

2004-01-14 Thread Matt Kettler
At 01:44 PM 1/14/2004, Gary Funck wrote: I'd asked this before (with no answer on the 'dev' list), Not surprising.. unless it's part of active development work ie: discussion of methods to fix a bug, coding, test results, etc, a post of a general question to sadev will generally be ignored as off

Re: [SAtalk] FP with backhair

2004-01-14 Thread Fred
This will be correct in 2.7 when SA starts using their own custom MIME parser. There are some issues with the current MIME parser, so answer to Q is a fix is coming soon in the flavor of SA 2.7. Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ 810-794-4400 mailto:[EM

RE: [SAtalk] FP with backhair

2004-01-14 Thread Dallas L. Engelken
> -Original Message- > From: Andreas Stollar [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 14, 2004 12:39 PM > To: Rolf Kraeuchi > Cc: SA > Subject: Re: [SAtalk] FP with backhair > > > Seems like any attachment, especially a binary such as a pdf >

Re: [SAtalk] FP with backhair

2004-01-14 Thread Andreas Stollar
Seems like any attachment, especially a binary such as a pdf would go over the maximum size to be scanned by SA. This must have been one tiny pdf, or you have set your SA instance to scan messages over the max size (default 250k) Most pdf's are much larger than this. Andreas On Wed, 14 Jan 2004,

RE: [SAtalk] FP with backhair

2004-01-14 Thread Gary Funck
> -Original Message- > From: Rolf Kraeuchi > Sent: Wednesday, January 14, 2004 10:05 AM > > Got my first false positive :-/ > Backhair scored on a .pdf... > Any hints how to avoid these? > > > X-Spam-Status: Yes, hits=12.0 tagged_above=3.0 required=5.3 > tests=J_BACKHAIR_11, J_BACKHAIR_