Hi,
I'm trying to figure out a proper way how to teach spamassassin new spam.
I'm using v. 3.04. My Setup consists of Sendmail and Spamassassin (via
procmail). Subsequently mail is retrieved by users using POP3.
When spam messages and not detected, my users typically forward this spam as
an rfc822 attachment to a special account ([EMAIL PROTECTED]). I was
then thinking of bouncing the actual attachment (spam) to another specific
account ([EMAIL PROTECTED]), which I've setup so that mails received on
this account are learned as spam. I've also taken care of ignoring the
'ReSent' headers added in bouncing a message. My only issue now is that when
a message is bounced (I use PC Pine to bounce messages), there are two
'From' headers. Eg.
>From [EMAIL PROTECTED] Wed Aug 10 10:55:28 2005
Return-Path: < [EMAIL PROTECTED] >
Received: from localhost ([125.125.125.25])
by mailhost.mydomain.com (8.12.11/8.12.11) with ESMTP id
j7A8tRQt018687
for <[EMAIL PROTECTED]>; Wed, 10 Aug 2005 10:55:28 +0200
From: "Spammer Me" <[EMAIL PROTECTED]>
As you can see the second 'From' is the true spammer, whilst the first
'From' is my own reporting account. My worry here is that bayes will use my
reporting account as a 'shortcut'. Is there any way of avoiding this (i.e.
can I tell bayes to ignore the first from header but not the second)?
Alternatively do you have any suggestions as to how I should train bayes?
Thanks,
Joe
