Johnson, S wrote: > I’m working on getting things optimized fully in our filter. I think > the spammers have been working over time lately. > > Once the message has left the linux spamassassin and forwarded onto a > mail server, say exchange or groupwise. > Many have made suggestions about Exchange, so I'll leave that topic alone.
In Groupwise, if you right click the message and select "view" instead of "open", you will be able to see a list of attachments to the message. The attachment named "mime.822" is the complete message, with full headers and mime sections. This file can be fed to sa-learn. If you "open" the message, recent versions of groupwise will hide this attachment to avoid confusing users, but it's still accessible if you "view" it.
