That was it, my maildroprc courier file that invokes SA is the
following:
if ( $SIZE < 204800 )
{
exception {
xfilter "/usr/bin/spamassassin"
}
}
if (/^X-Spam-Flag: *YES/)
{
exception {
to "$HOME/Maildir/.Trash/"
}
}
Well this is the changed one, but the $SIZE was only about 25kb so these
messages were not even giving spamassassin a chance to grab them, so
hopefully it will work better now.
Thanks for the idea Ryan
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ryan
Moore
Sent: Tuesday, September 23, 2003 7:29 PM
To: [EMAIL PROTECTED]
Subject: Re: [SAtalk] why is sa not catching the microsoft emails ?
Is there a size limit that SA implements to avoid scanning huge messages
whose content is primarily binary? I know amavisd has a limit such as
that, but I'm not sure if spamassassin has one as well or not.
Ryan Moore
----------
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Stephen Reese wrote:
> hmmmm, i still don't understand why SA is not even looking at them
> though see's everything else?
>
> -----Original Message-----
> From: Daniel Kaliel [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, September 23, 2003 5:59 PM
> To: Stephen Reese; [EMAIL PROTECTED]
> Subject: RE: [SAtalk] why is sa not catching the microsoft emails ?
>
>
> I am getting nailed with these as well, 72 for the day so far. Other
> admins I talked here have had over 100 so far on the day.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of
> Stephen Reese
> Sent: September 23, 2003 3:29 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] why is sa not catching the microsoft emails ?
>
>
> I've been getting tons of this mail usually with virus's attached. I
> am also getting messages that seem to orginate from our own server but
> they don't.
>
> I am running sa 2.6, redhat 7.3, courier 0.43.0
>
> The following is a header from one of the messages:
>
>
> Delivered-To: [EMAIL PROTECTED]
> Return-Path: <[EMAIL PROTECTED]>
> Received: from smtp04.nauticom.net (smtp04-pix.nauticom.net
> [::ffff:209.195.133.7])
> by prcdigital.com with esmtp; Tue, 23 Sep 2003 17:16:35 -0400
> Received: from ulgmxx (104.np13.np.dialup.nauticom.net
> [209.195.143.104])
> by smtp04.nauticom.net (8.12.9/8.12.9) with SMTP id
h8NKfCdF061535;
> Tue, 23 Sep 2003 16:41:14 -0400 (EDT)
> Date: Tue, 23 Sep 2003 16:41:12 -0400 (EDT)
> Message-Id: <[EMAIL PROTECTED]>
> FROM: "MS Corporation Technical Services"
> <[EMAIL PROTECTED]>
> TO: "Customer" <[EMAIL PROTECTED]>
> SUBJECT: New Network Critical Pack
> Content-Type: multipart/mixed;
> boundary="MIMEStream=_0+28469_34507359171605_72511450908"
>
>
>
>
> As you may notice there is no sa attempt, but the following is what
> occurs with the rest of my messages:
>
>
>
>
> Delivered-To: [EMAIL PROTECTED]
> Return-Path: <[EMAIL PROTECTED]>
> Received: from sc8-sf-list2.sourceforge.net (lists.sourceforge.net
> [::ffff:66.35.250.206])
> (TLS: TLSv1/SSLv3,168bits,DES-CBC3-SHA)
> by prcdigital.com with esmtp; Tue, 23 Sep 2003 16:58:02 -0400
> Received: from sc8-sf-list1-b.sourceforge.net ([10.3.1.13]
> helo=sc8-sf-list1.sourceforge.net)
> by sc8-sf-list2.sourceforge.net with esmtp (Exim 3.31-VA-mm2 #1
> (Debian))
> id 1A1uEU-0006fG-00
> for <[EMAIL PROTECTED]>; Tue, 23 Sep 2003 13:58:02 -0700
> Date: Tue, 23 Sep 2003 13:57:26 -0700
> Subject: Spamassassin-talk -- confirmation of subscription -- request
> 786688
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Reply-To: [EMAIL PROTECTED]
> X-Ack: no
> Sender: [EMAIL PROTECTED]
> Errors-To: [EMAIL PROTECTED]
> X-BeenThere: [EMAIL PROTECTED]
> X-Mailman-Version: 2.0.9-sf.net
> Precedence: bulk
> List-Help:
> <mailto:[EMAIL PROTECTED]>
> List-Post: <mailto:[EMAIL PROTECTED]>
> List-Subscribe:
> <https://lists.sourceforge.net/lists/listinfo/spamassassin-talk>,
>
> <mailto:[EMAIL PROTECTED]
> ib
> e>
> List-Id: Talk about SpamAssassin
> <spamassassin-talk.lists.sourceforge.net>
> List-Unsubscribe:
> <https://lists.sourceforge.net/lists/listinfo/spamassassin-talk>,
>
> <mailto:[EMAIL PROTECTED]
> cr
> ibe>
> List-Archive:
> <http://sourceforge.net/mailarchive/forum.php?forum=spamassassin-talk>
> Message-Id: <[EMAIL PROTECTED]>
> X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
> prcserver.prcdigital.com
> X-Spam-Status: No, hits=0.3 required=5.0 tests=NO_REAL_NAME
> autolearn=no
>
> version=2.60
> X-Spam-Level:
>
>
>
> Stephen Reese
> Systems Administrator
>
>
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
