> My question is this: When the message is resent some of the headers in > the resent message are different than the original message. Will > sa-learn be learning something differently if it analyzes the resent > message based on the fact that the headers are slightly different?
I would strongly consider forwarding the spam message as an attachment to some drop point, and then having some minimal code on the other end that will strip the outer wrapper. In fact,. since SA knows how to strip it's own wrap level, it might be worth an enhancement request to have a way for SA or SpamC or SALearn or some such to automatically strip the outer level of the mail and process the attachment as the original mail. This problem comes up a lot, and none of the solutions are realy all that good. Loren