On Wed, 24 Sep 2003, BG Mahesh wrote:

> Not sure if the rules we have added in local.cf are wrong. We are using SA+procmail
>
> header   LATEST_NET_SPAM Subject =~/^Latest Net Critical Upgrade/i
> describe LATEST_NET_SPAM Bounce - "Spam from Microsoft"
> score    LATEST_NET_SPAM 10.0
>
> Even if the subject says "Latest Net Critical Upgrade" I don't see LATEST_NET_SPAM 
> in the header of the email :-(
>
> Is the rule I have added wrong?

I had problems with my custom rules catching these emails as well.  I
believe it has to do with a bug in how SA processes the MIME parts in
pre-2.60 versions.  I just upgraded to 2.60 and now my custom rules are
getting it.


Matt

-- 
Matthew S. Cramer <[EMAIL PROTECTED]>          Office: 717-396-5032
Infrastructure Security Analyst                     Fax:    717-396-5590
Armstrong World Industries, Inc.                    Cell:   717-917-7099



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to