-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Toni Casueps wrote:
>
> Sometimes I can't find in the message body where is the string that
> matched the spam regex. I have tried KRegExpEditor but I enter the regex
> and no string in the messages gets highlighted, as if there were no
> matches.
> How can I now where did Spamassassin find the match?
Run spamassassin with the -d (debug) option. Included below are
snippets of the debug output showing rules that were triggered and what
the text was that caused them to match.
Dave
[21399] dbg: rules: running header regexp tests; score so far=0
[21399] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[21399] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<[EMAIL PROTECTED]>
[21399] dbg: rules: "
[21399] dbg: rules: ran header rule __CT_TEXT_PLAIN ======> got hit:
"text/plain"
[21399] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@webmail.unguarded.org>"
[21399] dbg: rules: ran header rule __CTE ======> got hit: "8"
[21399] dbg: rules: ran header rule __SARE_HEAD_MIME_VALID ======> got
hit: "1.0"
[21399] dbg: rules: ran header rule __CT ======> got hit: "t"
[21399] dbg: rules: ran header rule NO_REAL_NAME ======> got hit:
"<[EMAIL PROTECTED]>
[21399] dbg: rules: "
[21399] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<"
[21399] dbg: rules: ran header rule __SARE_PREC_BULK ======> got hit: "bulk"
[21399] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "P"
[21399] dbg: rules: ran header rule __SARE_WHITELIST_FLAG ======> got
hit: "<"
[21399] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "("
[21399] dbg: rules: ran header rule __HAS_X_MAILER ======> got hit: "S"
[21399] dbg: rules: ran header rule __HAS_SQUIRRELMAIL_IN_MAILER ======>
got hit: "SquirrelMail"
[21399] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[21399] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
"1149692214"
[21399] dbg: rules: ran header rule __HAS_X_PRIORITY ======> got hit: "3"
[21399] dbg: rules: ran header rule __MOZILLA_MSGID ======> got hit:
"<[EMAIL PROTECTED]>"
[21399] dbg: rules: ran eval rule UNPARSEABLE_RELAY ======> got hit
[21399] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[21399] dbg: rules: ran body rule __KAM_TIME4 ======> got hit: "time"
[21399] dbg: rules: ran body rule __SARE_SPEC_PROLEO5 ======> got hit:
"http://www.";
[21399] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "P"
[21399] dbg: uri: running uri tests; score so far=0.962
[21399] dbg: rules: ran uri rule __LOCAL_PP_NONPPURL ======> got hit:
"http://www.cenzic.com";
[21399] dbg: rules: ran uri rule __SARE_URI_ANY ======> got hit: "m"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3rc2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEiATx417vU8/9QfkRAnp+AJsGtp95ScuHO40YzHQG8XHy/7Z9gACgsASS
lvzqc/euQy6wMWYMgPjgLDA=
=dRHU
-----END PGP SIGNATURE-----
