Hello,
On Fri, 24 Aug 2007 20:38:13 -0400, Matt Kettler <[EMAIL PROTECTED]>
wrote:
> Zbigniew Szalbot wrote:
>>
>> I went for the report_safe 0 option but what I would really like to get
> is
>> also the spam YES/NO flag in it.
>>
>> I have X-Spam-Score: 22.7 (++++++++++++++++++++++)
>> X-Spam-Report - rather lengthy description of why the email was
> classified
>> as such but no X-Spam-Status or -Flag which makes it harder for some
> dumb
>> MUAs to filter emails.
>>
> That's interesting, as that's nothing like the defaults.
My (uncommented) settings are:
report_safe 0
trusted_networks 192.168/16
lock_method flock
required_score 5.0
use_bayes 1
bayes_auto_learn 1
bayes_ignore_header X-Bogosity
bayes_ignore_header X-Spam-Flag
bayes_ignore_header X-Spam-Status
add_header spam Flag _YESNOCAPS_
skip_rbl_checks 0
use_razor2 1
use_pyzor 1
>
> Is there an X-Spam-Checker-Version in the headers? or just that weird
> score and spam-report?
No, there isn't. The exmaple content is this:
X-Spam-Score: 17.7 (+++++++++++++++++)
X-Spam-Report: Spam detection software, running on the system
"szalbot.homedns.org", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
The administrator of that system for details.
Content preview: has made you an Ecard at 2000greetings.com. To recieve
your
greeting, click on this link: 2000greetings.com Have Fun,
2000greetings.com
[...]
Content analysis details: (17.7 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.1 RDNS_NONE Delivered to trusted network by a host with
no
rDNS
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?72.64.78.137>]
0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 56]
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 WHOIS_NETSOLPR URL registered as a NetSol Private
Registration
[URIs: 2000greetings.com]
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: 12.105.109.110]
0.2 URIBL_GREY Contains an URL listed in the URIBL greylist
[URIs: 2000greetings.com]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL
blocklist
[URIs: 12.105.109.110]
2.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL
blocklist
[URIs: 12.105.109.110]
2.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL
blocklist
[URIs: 12.105.109.110]
>
> How are you calling SA? Are you using something like MailScanner,
I use spamd, nothing like MailScanner is involved.
> mimdefang, etc? or are you just doing something like calling
> spamassassin or spamc from a procmail script?
No - the only relationship is between MTA and spamd.
>
> Do you use spamc/spamd? If so, did you restart spamd after your edits?
Yes, spamd got restarted after each edit.
--
Zbigniew Szalbot
www.slowo.pl
www.lcwords.com
