I have a Public folder containing spam (dragged not forwarded). I want to use sa-learn to teach them as being spam. So I used Thunderbird to download the Public Folder via IMAP into MBOX format.
Looking at the MBOX file, A typical header is: ------_=_NextPart_001_01C774F8.2EE0E1BA-- From - Mon Oct 01 11:29:51 2007 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 X-MimeOLE: Produced By Microsoft Exchange V6.5 Received: from relay.mira.co.uk ([193.35.217.1]) by mail.mira.co.uk with Microsoft SMTPSVC(6.0.3790.1830); Mon, 2 Apr 2007 09:54:31 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C77504.87157D80" Received: from mocha.ocn.ne.jp (unknown [220.205.145.6]) by relay.mira.co.uk (Postfix) with SMTP id 171261C11D9 for <[EMAIL PROTECTED]>; Mon, 2 Apr 2007 09:53:46 +0100 (BST) Content-class: urn:content-classes:message Subject: Re: snook precipice Date: Mon, 2 Apr 2007 09:53:34 +0100 Message-ID: <[EMAIL PROTECTED]> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: snook precipice Thread-Index: Acd1BIe2WZhfEKZgSDKkANlcsHJPfw== From: "Tyree Hollisq" <[EMAIL PROTECTED]> To: "Duncan Hill" <[EMAIL PROTECTED]> Reply-To: "Tyree Hollisq" <[EMAIL PROTECTED]> This is a multi-part message in MIME format. ------_=_NextPart_001_01C77504.87157D80 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable My question is, how "smart" is Spamassassin with regards to ignoring all the stuff that happens after it hit the gateway (relay.mira.co.uk)? Cheers, Paul Paul Hutchings Network Administrator, MIRA Ltd. Tel: 44 (0)24 7635 5378 Fax: 44 (0)24 7635 8378 mailto:[EMAIL PROTECTED] -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England. Registered in England and Wales No. 402570 VAT Registration GB 114 5409 96 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited.