On Tue, 19 Sep 2017 08:11:03 -0500
David Jones wrote:

> On 09/19/2017 07:23 AM, Kevin A. McGrail wrote:
> > Is it purposeful extra space though that might indicate spaminess?
> > Spample? Regards,
> > KAM
> > 
> > On September 19, 2017 8:13:09 AM EDT, RW
> > <rwmailli...@googlemail.com> wrote:
> > 
> >     On Tue, 19 Sep 2017 09:27:13 +0100
> >     Sebastian Arcus wrote:
> > 
> >         I've had a number of emails with no subject not triggering
> > the MISSING_SUBJECT rule - only to discover that the spammers have
> > added a white space after 'Subject:' - which appears to fool the
> > code into
> >         thinking that there is an actual subject. Would it be
> > possible to 'smarten up' the code a bit to recognise this?
> > 
> > 
> >     The space doesn't make a difference.
> > 
> >     The test is for a missing subject not an empty subject. Some
> > people send emails without setting a subject but the client will
> > normally still add the header.
> >   
> 
> I have had these in place for years.  Maybe Kevin can consolidate and 
> integrate this into his KAM.cf so I could remove them or we could 
> eventually get them into the default SA ruleset after some testing.
> 
> header          ENA_SUBJ_IS_SPACE       Subject =~ /^ $/

The OP said there was a space after 'Subject:', so that rule wouldn't
detect it.

Reply via email to