On 27 May 2007, [EMAIL PROTECTED] said:
> I made changes and the current SVN version fixes ticket #396 as well
> as the good old "Exporter.pm warnings" bug.
#396 is fixed. I now see this, with scores and descriptions:
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 DKIM_POLICY_SIGNSOME Domain Keys Identified Mail: policy says domain
signs some mails
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[217.226.209.237 listed in zen.spamhaus.org]
1.6 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[217.226.209.237 listed in dnsbl.sorbs.net]
0.1 RDNS_DYNAMIC Delivered to trusted network by host with
dynamic-looking rDNS
0.7 SHORT_HELO_AND_INLINE_IMAGE Short HELO string, with inline image
0.0 DYN_RDNS_SHORT_HELO_IMAGE Short HELO string, dynamic rDNS, inline
image
0.3 DYN_RDNS_SHORT_HELO_HTML Sent by dynamic rDNS, short HELO, and HTML
0.0 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic
rDNS
1.5 FUZZY_OCR_WRONG_CTYPE BODY: Mail contains an image with wrong
content-type set
Image has format "GIF" but
content-type is "image/jpeg"
2.5 FUZZY_OCR_CORRUPT_IMG BODY: Mail contains a corrupted image
Corrupt
image: GIF-LIB error: Image is defective,
decoding aborted.
13 FUZZY_OCR BODY: Mail contains an image with common spam text
inside
Words found:
"target" in 1 lines
"service" in 1
lines
"stock" in 2 lines
"price" in 2 lines
"company" in 1 lines
"recommendation" in 1
lines
(12 word occurrences found)
0.1 AWL AWL: From: address is in the auto white-list
Wow, those descriptions look disgusting ;)
I'm rather disturbed by the +13 score. Surely *no* single test should
be able to add *nearly three times* my spam threshold of +5 to the score
of a single mail? Is there a way to threshold the thing so that it will
cap scores at +4.5 or something more sane?
> There is still another problem though, the formatting of the rule
> descriptions changed in SA 3.2 and I can't seem to get it to do the
> "old" formatting (listing the words etc), the wrapper screws it up
> totally.
I'll say! However, spamassassin --remove-markup can still expunge even
this wildly mangled description...
> I'd be glad if some people could try the SVN version with SA 3.2 and
> report back. If someone knows how to fix those ugly output formatting
> problems, tell me. This is a cosmetically issue but it still looks bad.
I'll look at that soon (I have some work to avoid and this is a good way
to avoid it).
--
`On a scale of one to ten of usefulness, BBC BASIC was several points ahead
of the competition, scoring a relatively respectable zero.' --- Peter Corlett
