Spamassasin scanning sporadically, please help.

[Antony Stone]

On Friday 12 September 2003 7:37 pm, Denis Beauchemin wrote:

> Juan,
>
> I'm not sure about this but all examples I saw used EITHER header OR
> body but NOT BOTH for the same rule.
>
> I would suggest splitting your rules as follows:
> header    FOUL_WORD1  Subject =~ /\bfoulword\b/i
> score     FOUL_WORD1  100.0
> body      FOUL_WORD2  /\bfoulword\b/i
> score     FOUL_WORD2  100.0

Hm, that's a good point, however I helped Juan to test this earlier by
creating my own SA rules in spam.assassin.prefs, and I used Juan's template
of 'header; body; score' and it does appear to be working.

I can place "fowlword" in the subject of the email, or in the body, and it
gets picked up with the appropriate score and tagged as spam by MS.

I haven't studied SA to see whether this is accepted practice or not, but I
can confirm that it does appear to work (however I have been unable to
reproduce Juan's intermittent rule matching, despite setting up a cron job to
send myself an email every minute for a few hours - every single one got
correctly tagged as spam with the FOWL_WORD match in the spam headers).

Regards,

Antony.

--

"Note: Windows 98, Windows 98SE and Windows 95 are not affected by [MS
Blaster].   However, these products are no longer supported.   Users of these
products are strongly encouraged to upgrade to later versions."   (which are
affected by MS Blaster...)

http://www.microsoft.com/security/security_bulletins/ms03-026.asp