On Tue, 9 Dec 2003 11:07:38 -0500 (EST), Charles Gregory <[EMAIL PROTECTED]> posted to spamassassin-talk: > As a side note, in a similar vein: >> While contacting Habeas support about a semi-related issue, I was >> informed that spamassassin should only be testing for >> 'X-Habeas-SWE-3: like Habeas SWE (tm)' > Now this is kinda stupid. If the whole 'point' of Habeas is that > the headers include a copyrighted work of art (the haiku) then > failing to test for the lines containing that work of art would > allow spammers to only fake the one header that we test for, which > does not contain that art..... > I'm so confoosed! :-)
I imagine they're simply attempting to optimize things for you. For the time being, seeing just the third line is probably enough, and there's not a lot of point in looking for the other two. If and when spammers start to use this as a hole to get in through, you'll have to change your strategy, but it's a reasonable stopgap measure if you get false negatives by looking for all three lines in a particular sequence. (If SA made it easier to short-circuit AND operations, you could tell it to not look for lines 2 and 3 if line 1 isn't there, but that's apparently not doable at the moment.) /* era */ -- The email address era the contact information Just for kicks, imagine at iki dot fi is heavily link on my home page at what it's like to get spam filtered. If you <http://www.iki.fi/era/> 500 pieces of spam for want to reach me, see instead. each wanted message. ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
