I'm running SA 2.60-rc1, and have noticed that spamassassin is not catching
microsoft executable attachments when they arrive as an enclosed bounce
message. Shouldn't SA be detecting the microsoft_executable stuff since the
test is done on rawbody?
Here's the SA headers-
>From the sendmail qf* file:
H??X-Spam-Status: No, hits=-0.2 required=5.0
tests=BAYES_01,LARGE_HEX,NO_REAL_NAME,
UPPERCASE_25_50 autolearn=no version=2.60-rc1
H??X-Spam-Checker-Version: SpamAssassin 2.60-rc1 (1.197-2003-08-21-exp) on
mailgate.cvo.roguewave.com
Here's the first part of the sendmail df* file (I've added <munge> to a few
strategic places to avoid getting false positives:
[EMAIL PROTECTED] tmp]# head -50 dfh8QFWGuP018731
Hi. This is the qmail-send program at eos.dk.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[EMAIL PROTECTED]>:
List is now run by mailman - visit http://eos.dk/mailman/listinfo
--- Below this line is a copy of the message.
Return-Path: <[EMAIL PROTECTED]>
Received: (qmail 7962 invoked from network); 26 Sep 2003 15:32:01 -0000
Received: from unknown (HELO SUVOMOY) (203.197.125.228)
by eos.dk with SMTP; 26 Sep 2003 15:32:01 -0000
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Re: Re: My det<munge>ails
Date: Wed, 25 Sep 2002 21:04:37 +0530
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_NextPart_000_15A11368"
This is a multipart message in MIME format
--_NextPart_000_15A11368
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Please see the attached file for details.
--_NextPart_000_15A11368
Content-Type: application/octet-stream;
name="your_document.p<munge>if"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="your_document.p<munge>if"
TVqQAAM<munge>AAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAA
AAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFt<munge>IGNhbm5vdCBiZSBydW4gaW4gR
E9TIG1v
ZGUuDQ0KJAAAAAAAAADToEjPl8EmnJfBJpyXwSacFN0onI3BJpx/3iyc7cEmnMHeNZyawSacl8Em
nJTBJpyXwSecBsEmnPXeNZyawSacf94tnI3BJpxSaWNol8EmnAAAAAAAAAAAAAAAAAAAAABQRQAA
TAEEAF2zPz8AAAAAAAAAAOAADwELAQYAAAAAAABwAAAAAAAA1usBAAAQAAAAYAEAAABAAAAQAAAA
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
