> Also, if you guys ever need any help, I'd love to lend a hand. I've been
> curious about writing a spam reporting system, and it might make a great
> plugin for spamassassin (then again, I've had nothing but trouble when
> trying to analyze message headers to figure out how to detect forged
> headers, etc. so it'd be nice to have a community around and just be a
> contributor)...
One thing I want to do is write a little C program that connects to Postgres
(or Perl but with a C client just like spamc/d) and reports on the tests that
*all* messages score on.
For example:
X-Spam-Status: No, hits=4 required=6 tests=FROM_NAME_EQ_FROM_ADDR
That was from a non-spam. Parse out the tests and insert each test as a row
in a database with a unique "email ID"
$msgid = nextval('seq_msgids');
insert into sahits (sa_tname, sa_msgid) values ('FROM_NAME_EQ_FROM_ADDR',
$msgid);
insert into sascores (sa_msgid, sa_score) values ($msgid, 4);
... or a bigger-hits nonspam:
X-Spam-Status: Yes, hits=3 required=6
tests=NORMAL_HTTP_TO_IP,CLICK_HERE_LINK,A_HREF_TO_IP
$msgid = nextval('seq_msgids');
insert into sahits (sa_tname, sa_msgid) values ('HTTP_TO_IP', $msgid);
insert into sahits (sa_tname, sa_msgid) values ('A_HREF_TO_IP', $msgid);
insert into sascores (sa_msgid, sa_score) values ($msgid, 3);
Spam would be the same, only they'd presumably have hits greater than the trip
level. :-)
With this kind of database I can get a very good look at what tests are in
normal messages and which specific tests are scoreing best this week/month as
compared to before. (the date would also be inserted but I do those
automatically, not in the select itself.)
What do you all think?
Regards,
Andrew
_______________________________________________________________
Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
