Thanks Chris, Those instructions are excellent. Thanks very much. We simply had to discard spam above 5.0. We we were getting over 5000 spam emails a day. The volume was simply too much to handle.
Shane ----- Original Message ----- From: "Chris Santerre" <[EMAIL PROTECTED]> To: "'shane mullins'" <[EMAIL PROTECTED]>; <users@spamassassin.apache.org> Sent: Wednesday, December 22, 2004 9:41 AM Subject: RE: spam tagging > > > >-----Original Message----- > >From: shane mullins [mailto:[EMAIL PROTECTED] > >Sent: Wednesday, December 22, 2004 9:30 AM > >To: users@spamassassin.apache.org > >Subject: spam tagging > > > > > >I have a simple tagging question. I searched around, but didn't find a > >solid answer. We have our mail set to be discarded at a score of 5.0, > >and it works great. But, we would like to have spam above 3.0 tagged, > >and looking at the message source, it is, along with the tests that > >flagged it. Would it be possible to have ****SPAM**** (or something > >similar) appended to the subject of messages with a score above 3.0, > >but below 5.0? > > Why not just add the score in the subject for all. You discard the ones > above 5 anyway. (Something I don't recommend.) > > From the web and files that come with SA: > > " > rewrite_header { subject | from | to } STRING > By default, suspected spam messages will not have the Subject, >From or > To lines tagged to indicate spam. By setting this option, the header will be > tagged with STRING to indicate that a message is spam. For the From or To > headers, this will take the form of an RFC 2822 comment following the > address in parantheses. For the Subject header, this will be prepended to > the original subject. Note that you should only use the _REQD_ and _SCORE_ > tags when rewriting the Subject header unless report_safe is 0. Otherwise, > you may not be able to remove the SpamAssassin markup via the normal > methods. Parentheses are not permitted in STRING if rewriting the From or To > headers. (They will be converted to square brackets.) > " > > --Chris > (OK, today I am nervous! The google logo has polar bears freezing an 'O'. > For what possible purpose, other then evil, would they be doing that?!"