But if the original message is in attachment, spam status in headers, and content analysis in message body text, does sa-learn to handle it correctly?
----- Original Message ----- From: "Mike Burger" <[EMAIL PROTECTED]> To: "Harri Pesonen" <[EMAIL PROTECTED]> Cc: "Dan Wing" <[EMAIL PROTECTED]>; "Theo Van Dinter" <[EMAIL PROTECTED]>; "Dean Gallea" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Sunday, August 10, 2003 5:49 PM Subject: Re: [SAtalk] Re: [Spamassassin-saproxy] Outlook Add-In for SpamAssassin is here > What's to get? If you use the two options I gave you, the report will be > in the headers, and won't affect your ability to properly report the spam. > > Try it and see. > > On Sun, 10 Aug 2003, Harri Pesonen wrote: > > > I still don't get it. The report is not in attachment, the original message > > is. The report is in message body. > > > > ----- Original Message ----- > > From: "Mike Burger" <[EMAIL PROTECTED]> > > To: "Harri Pesonen" <[EMAIL PROTECTED]> > > Cc: "Dan Wing" <[EMAIL PROTECTED]>; "Theo Van Dinter" > > <[EMAIL PROTECTED]>; "Dean Gallea" <[EMAIL PROTECTED]>; > > <[EMAIL PROTECTED]>; > > <[EMAIL PROTECTED]> > > Sent: Sunday, August 10, 2003 12:02 PM > > Subject: Re: [SAtalk] Re: [Spamassassin-saproxy] Outlook Add-In for > > SpamAssassin is here > > > > > > > If you edit your /etc/mail/spamassassin/local.cf and insert the following > > > lines: > > > > > > report_safe 0 > > > use_terse_report 0 > > > > > > You'll find that the report is put into the message headers, instead of as > > > a MIME attachment. > > > > > > On Sun, 10 Aug 2003, Harri Pesonen wrote: > > > > > > > Are you saying, that if SA inserts the original e-mail as an attachment, > > > > then it is OK to feed this message to sa-learn, even if it has a new > > body > > > > text: > > > > > > > > "This mail is probably spam. The original message has been attached > > > > along with this report, so you can recognize or block similar unwanted > > > > mail in future. See http://spamassassin.org/tag/ for more details. > > > > > > > > Content preview: Loading image ... URI:http://www32.com/gh/ > > > > URI:http://www32.com/gh/ghad.jpg URI:http://www32.com/gh/rm.htm > > > > URI:http://www32.com/gh/rm.gif [...] > > > > > > > > Content analysis details: (19.70 points, 5 required) > > > > X_MSMAIL_PRIORITY_HIGH (0.0 points) Sent with 'X-Msmail-Priority' set > > to > > > > high > > > > X_PRIORITY_HIGH (1.9 points) Sent with 'X-Priority' set to high > > > > FROM_ENDS_IN_NUMS (0.6 points) From: ends in numbers > > > > MSGID_OE_SPAM_4ZERO (4.3 points) Message-Id generated by spam tool > > > > (4-zeroes variant) > > > > INVALID_DATE (0.6 points) Invalid Date: header (not RFC 2822) > > > > MSGID_SPAMSIGN_ZEROES (4.3 points) Message-Id generated by spam tool > > > > (zeroes variant) > > > > HTML_80_90 (0.5 points) BODY: Message is 80% to 90% HTML > > > > BAYES_60 (1.1 points) BODY: Bayesian classifier says spam > > > > probability is 60 to 70% > > > > [score: 0.6024] > > > > HTML_MESSAGE (0.0 points) BODY: HTML included in message > > > > HTML_IMAGE_ONLY_02 (1.4 points) BODY: HTML has images with 0-200 bytes > > of > > > > words > > > > MSGID_OUTLOOK_TIME (4.4 points) Message-Id is fake (in Outlook Express > > > > format) > > > > DATE_IN_PAST_06_12 (0.1 points) Date: is 6 to 12 hours before Received: > > > > date > > > > MIME_HTML_ONLY (0.1 points) Message only has text/html MIME parts > > > > PRIORITY_NO_NAME (0.4 points) Message has priority setting, but no > > > > X-Mailer > > > > > > > > The original message did not contain plain text, and may be unsafe to > > > > open with some email clients; in particular, it may contain a virus, > > > > or confirm that your address can receive spam. If you wish to view > > > > it, it may be safer to save it to a file and open it with an editor." > > > > > > > > I want to be 100% sure about this! :-) > > > > > > > > ----- Original Message ----- > > > > From: "Dan Wing" <[EMAIL PROTECTED]> > > > > To: "Theo Van Dinter" <[EMAIL PROTECTED]> > > > > Cc: "Harri Pesonen" <[EMAIL PROTECTED]>; "Dean Gallea" <[EMAIL PROTECTED]>; > > > > <[EMAIL PROTECTED]>; > > > > <[EMAIL PROTECTED]> > > > > Sent: Saturday, August 09, 2003 10:32 PM > > > > Subject: Re: [SAtalk] Re: [Spamassassin-saproxy] Outlook Add-In for > > > > SpamAssassin is here > > > > > > > > > > > > > On Sat, 9 Aug 2003, Theo Van Dinter wrote: > > > > > > > > > > > The bayes system won't learn already learned messages (as per the > > > > > > Message-ID header). That's that whole bayes_seen db. > > > > > > > > > > > > There was a bug where messages w/out the Message-ID header could be > > > > > > learned/forgotten multiple times. That's fixed in 2.60. > > > > > > > > > > > > sa-learn looks for the X-Spam-Status header, and if it exists, it'll > > > > > > remove the markup from the message, so report_safe mails are fine. > > > > > > > > > > Ah. I had thought it didn't work based on some testing I did, but > > > > > obviously my testing was flawed. > > > > > > > > > > Thanks. > > > > > -d > > > > -- > Mike Burger > http://www.bubbanfriends.org > > Visit the Dog Pound II BBS > telnet://dogpound2.citadel.org or http://dogpound2.citadel.org:2000 > > To be notified of updates to the web site, send a message to: > > [EMAIL PROTECTED] > > with a message of: > > subscribe > ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk