They say, "when all you have is spamassassin, everything looks like a spam." Well, maybe they don't, but they should. (grin)
I'd add something to your /etc/procmailrc file for this; perhaps some unique line from the attachment, and route it to dev/null. Because the document isn't random. You could add a new spamassassin rule, but the procmail one is easier (imho). You're looking for something like: :0 * [unique identifier] /dev/null except applied to the body of the message. hope this helps. russ On Tuesday 22 October 2002 08:54, Milt Epstein wrote: > On Tue, 22 Oct 2002, Frank Pineau wrote: > > On Tue, 22 Oct 2002 10:18:38 -0500 (CDT), you wrote: > > >Both contain "goldfish" in the subject, one is just plain "goldfish" > > >and one is "Fw: goldfish". > > > > > >Both come from hotmail addresses. > > > > > >Both have attachments, one is application/octet-stream, one is > > >audio/x-midi. > > > > > >Both say: > > > > > > Hi Dear > > > Check the attach > > > See u > > > > > >in the body of the message (in HTML). > > > > > >I was thinking that these messages would already be covered by > > >existing SpamAssassin rules, since it seems like a fairly common spam > > >message that people are getting. > > > > Doesn't sound like spam to me. Sounds like someone with a virus > > that mails out a random document to everyone in the user's address > > book. > > Well, the document isn't random. > > Anyway, if you're talking about theoretical/technical distinctions, > perhaps it is virus-related. But there are different definitions of > what spam is, and I'm sure it fits some of them. > > I didn't really want to get into a discussion of whether it's a virus > or spam. The thing is, on a practical/functional level, and as it > appears to the person receiving the mail, it looks like spam and can > be dealt with as if it were spam. It doesn't really matter how it > originated. > > Milt Epstein > Research Programmer > Integration and Software Engineering (ISE) > Campus Information Technologies and Educational Services (CITES) > University of Illinois at Urbana-Champaign (UIUC) > [EMAIL PROTECTED] > > > > ------------------------------------------------------- > This sf.net emial is sponsored by: Influence the future > of Java(TM) technology. Join the Java Community > Process(SM) (JCP(SM)) program now. > http://ad.doubleclick.net/clk;4699841;7576301;v?http://www.sun.com/javavote > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This sf.net emial is sponsored by: Influence the future of Java(TM) technology. Join the Java Community Process(SM) (JCP(SM)) program now. http://ad.doubleclick.net/clk;4699841;7576301;v?http://www.sun.com/javavote _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
