On Mon, 3 Nov 2003, Robert Kropiewnicki wrote:
> Hello all,
>
> Other than injecting something into the headers to make it look like the MUA
> was Mozilla, what else might trip this rule? We've had more than a few
> occasions where we've crossed a threshold because of this rule. Hitting a
> 2.7 point rule when the default threshold is only 5 is extremely frustrating
> when you don't know why it is happening.
>
> I have seared the SA-Talk archives but the only information there seems to
> speak as to why the rule was included in the first place. Any help in
> understanding what is going on would be most appreciated.
>
> For what it's worth, there is nothing in the headers of any of the emails
> we've had tagged that even mentioned Mozilla in the headers.
Grep the Source Luke! ;)
Looking at the 20_meta_tests.cf SA source file, FORGED_MUA_MOZILLA
is clearly dependent upon a 'X-Mailer:' header that contains the
string "Mozilla" (plus other factors).
Do you have your mail client set to display -all- headers?
Is it possible that you're overlooking that X-Mailer: header?
If it's truely missing and you're seeing FORGED_MUA_MOZILLA then you
either have a very broken SA installation or somebody has a local
FORGED_MUA_MOZILLA rule definition that is overriding the SA supplied
one.
FWIW, I consider running a threshold of 5 to be a bit risky, as a
polluted Bayes will push you above that. I run 6 to be safer.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
