Greetings,

I've got a small problem with SpamAssassin that I hope you can help me
with. I receive a significant amount of email forwarded through
another account. I don't have any access to the way SpamAssassin is
run on this account; it's run on every piece of mail. And it wraps the
message in a "Start SpamAssassin results" wrapper. Again, I don't have
any ability to control how this forwarding site runs SA.

Now, the forwarding site _does_ properly mark spam. The problem is
that when this message is then forwarded to my real account (which
also runs SA, or rather I run SA via procmail) it does NOT trigger as
spam. You will note in the message below that the original SA run had
11.50 hits and was flagged as spam, but my SA invocation finds 1.9
hits and doesn't mark it as spam. This is probably because the
forwarding site wrapped it.

What would be nice is either

- a way for SA to recognize a wrapped message and mark it accordingly;
  or
- SA to delve into a wrapped message and run itself on the original
  message instead.

(If there's any other way to invoke SA to do these things, that would
also be great. I'm just running /usr/bin/spamc via procmail.)

Thanks -

JDO


>From some_spammer Tue Aug 26 00:01:03 2003
X-Spam-Status: No, hits=1.9 required=6.0
        tests=HTML_20_30,HTML_FONT_COLOR_BLUE,HTML_MESSAGE,
              REMOVE_IN_QUOTES,REMOVE_PAGE
        version=2.55
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
X-Sorted: Default
From: "Mitchel Bishop" <[EMAIL PROTECTED]>
To: me
Subject: No Prescription Required Cheap Prices
Date: Tue, 26 Aug 03 08:39:16 GMT

This is a multi-part message in MIME format.

------------=_3F4AFFE9.2FD31CBE
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit


-------------------- Start SpamAssassin results ----------------------
This mail is probably spam.  The original message has been altered
so you can recognise or block similar unwanted mail in future.  If you
feel that this mail has been marked as spam in error, please forward
the original message (attached) with all the MAIL HEADERS *and* these
SPAM: lines to [EMAIL PROTECTED]

NOTE: Without the FULL mail headers from the original message, we
cannot do anything!

See http://spamassassin.org/tag/ for more details.

Content analysis details:   (11.50 hits, 7 required)
HTML_80_90         (0.5 points)  BODY: Message is 80% to 90% HTML
HTML_MESSAGE       (0.1 points)  BODY: HTML included in message
HTML_FONT_COLOR_BLUE (0.1 points)  BODY: HTML font color is blue
HTML_IMAGE_ONLY_02 (1.9 points)  BODY: HTML has images with 0-200 bytes of words
REMOVE_PAGE        (0.1 points)  URI: URL of page called "remove"
RAZOR2_CHECK       (3.0 points)  Listed in Razor2, see http://razor.sf.net/
RCVD_IN_SBL        (0.6 points)  RBL: Received via SBLed relay, see 
http://www.spamhaus.org/sbl/
                   [RBL check: found 89.100.80.218.sbl.spamhaus.org.]
RCVD_IN_RFCI       (1.8 points)  RBL: Received via a relay in ipwhois.rfc-ignorant.org
                   [RBL check: found 89.100.80.218.ipwhois.rfc-ignorant.org., type: 
127.0.0.6]
MISSING_MIMEOLE    (0.5 points)  Message has X-MSMail-Priority, but no X-MimeOLE
MIME_HTML_ONLY     (0.1 points)  Message only has text/html MIME parts
FORGED_MUA_OIMO    (2.8 points)  Forged mail pretending to be from MS Outlook IMO

-------------------- End of SpamAssassin results ---------------------

The original message did not contain plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_3F4AFFE9.2FD31CBE
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

<original spam was here>

------------=_3F4AFFE9.2FD31CBE--



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to