On Sat, 16 Mar 2013, jida...@jidanni.org wrote:
It sure would be nice if spamassassin had a flag that would cause it to
spit out this postprocessed body, so we could know exactly what it is
that we are tying to match against!!
Same for rawbody!
Here is what I have in my testbed .cf file:
body __ALL_BODY /.+/
tflags __ALL_BODY multiple
rawbody __ALL_RAWBODY /.+/
tflags __ALL_RAWBODY multiple
No need for special support in SA.
OK, I think I know what is going on. For the spam message:
Subject: Re: Your Photos
Hello,
as promised your photos http://...
There's a rule for that in my sandbox already. Unfortunately there's only
about thirty instances of that in the masscheck corpus (out of >2m spams)
so it's not being promoted.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Men by their constitutions are naturally divided in to two parties:
1. Those who fear and distrust the people and wish to draw all
powers from them into the hands of the higher classes. 2. Those who
identify themselves with the people, have confidence in them,
cherish and consider them as the most honest and safe, although not
the most wise, depository of the public interests.
-- Thomas Jefferson
-----------------------------------------------------------------------
288 days since the first successful private support mission to ISS (SpaceX)
