On Wed, 12 Nov 2003, Matt Kettler wrote:

> At 01:38 PM 11/12/2003, Scott Antonivich wrote:
> >but can attachments be tagged as spam per user? If
> >so, what do I need to place in this users config file?
>
> You'd have to create a custom rule to look for mime boundaries..
>
> However, to do it per-user, you'll need to have per-user configs, and
> per-user rules, something that most site-wide SA configurations have no
> capability to do.

You'll have to be discrimiating in what kind of mime boundaries
you look for.

For example, many modern mail clients (such as Eudora, Outlook, Mozilla)
have the ability to send combo text/html or text/rtf mail as Mime
multi-part-alternative messages. Most modern clients will show such a
message as just a single-part message and give no clue as to the
internal structure.
Some systems us Mime parts for such things as PGP signatures or ".vcard"
signatures.

Even such things as sendmail error bounce messages often come as
multi-part mime messages.

Now what about a message that has only one part, but that part is
a Base-64 encoded jpg of a spam-ad? It would not necessarily have
any mime boundary other than the content tag in the header.
Or for that matter, a single Base-64 encoded virus, (I've seen that
too. ;(

So there's no simple definition of what constitutes an "Attachment".

-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{



-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to