[TriLUG] spamassassin config
Joel Ebel
jbebel at ncsu.edu
Tue Jan 11 14:44:40 EST 2005
In older versions of spamassassin, if you want the body modified you
need to unset report_header. Otherwise the report will be in the
header. The UPGRADE file for the 3.0 version has some more to day, but
unfortunately I haven't used 3.0 yet, so I can't tell you any more than
this says:
- The default mode of tagging (which used to be ***SPAM*** in the subject
line) no longer takes place. Instead the message is rewritten. If an
incoming message is tagged as spam, instead of modifying the original
message, SpamAssassin will create a new report message and attach the
original message as a message/rfc822 MIME part (ensuring the original
message is completely preserved and easier to recover). If you do not
want to modify the body of incoming spam, use the "report_safe" option.
The "report_header" and "defang_mime" options have been removed as a
result.
Joel
Greg Brown wrote:
> I have been tinkering around with Spamassassin this morning. Before I
> rebuilt my server earlier this year I used to get a "report" in each
> suspected SPAM e-mail that looked something like this:
>
> SPAM: -------------------- Start SpamAssassin results
> ----------------------
> SPAM: This mail is probably spam. The original message has been altered
> SPAM: so you can recognise or block similar unwanted mail in future.
> SPAM: See http://spamassassin.org/tag/ for more details.
> SPAM:
> SPAM: Content analysis details: (7.30 hits, 4 required)
> SPAM: NO_COST (1.0 points) BODY: No such thing as a free
> lunch (3)
> SPAM: CLICK_BELOW (0.3 points) BODY: Asks you to click below
> SPAM: ACCOUNT_CLICK (0.1 points) BODY: Click to perform an action
> on an account
> SPAM: EXCUSE_16 (0.1 points) BODY: I wonder how many emails
> they sent in error...
> SPAM: SPAM_PHRASE_21_34 (1.9 points) BODY: Spam phrases score is 21 to
> 34 (high)
> SPAM: [score: 23]
> SPAM: HTML_FONT_COLOR_YELLOW (0.4 points) BODY: HTML font color is yellow
> SPAM: BIG_FONT (0.3 points) BODY: FONT Size +2 and up or 3
> and up
> SPAM: CLICK_HERE_LINK (0.3 points) BODY: Tells you to click on a URL
> SPAM: MIME_HTML_NO_CHARSET (0.7 points) RAW: Message text in HTML
> without specified charset
> SPAM: RCVD_IN_ORBS (2.2 points) RBL: Received via a relay in
> orbs.dorkslayers.com
> SPAM: [RBL check: found
> 235.6.94.130.orbs.dorkslayers.com.]
> SPAM:
> SPAM: -------------------- End of SpamAssassin results
> ---------------------
>
> Now I get no such report - just the subject line of my e-mail is
> rewritten with [SPAM] and that's it. I thought the secret was
> "rewrite_body 1" in spamassassin's local.cf but that wasn't it. Any
> ideas on how to get this back?
>
> ...back to google..
>
> Greg
>
More information about the TriLUG
mailing list