SA/MS Testing
Steen, Glenn
Glenn.Steen at AP1.SE
Wed Dec 22 10:17:19 GMT 2004
Please correct me if I'm wrong, but you'd need to "revert" the message
to it's pristine look (meaning no headers from your server etc) before
reinjecting it(?).
-- Glenn
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Rodney Green
> Sent: den 21 december 2004 19:36
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: SA/MS Testing
>
>
> Thanks Alex. I did as you said.
>
> Odd how when I run the message through the system, by
> telneting like you
> said, and it gives me an SA score below 5. When I run the same message
> through spamassassin using "spamassassin -t < messagefile" I
> see a much
> higher score of 11.9. I noticed that when running
> "spamassasin -t" that
> BAYES_99 is one of the tests listed but when I send the
> message through the
> system I see no BAYES related tests in the message headers.
>
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
> Of Alex Neuman van der Hans
> Sent: Tuesday, December 21, 2004 10:53 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: SA/MS Testing
>
>
> Try telnetting to port 25, doing a "HELO " followed by what
> the spammer said
> his/her hello was, then "MAIL FROM:" what the spammer said
> the origin was,
> "RCPT TO:" to you, then DATA, and finally, the message
> itself. A single
> period, and QUIT.
>
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
> Of Rodney Green
>
> Sent: Tuesday, December 21, 2004 10:39 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: SA/MS Testing
>
> Hello. Is there a way to re-inject a message into MailScanner
> so it will be
> scanned again by MS/ClamAV/SpamAssassin? I've added some spam
> to my bayes DB
> using sa-learn and would like to test sending the same spam
> through again
> and see if it is filtered properly.
>
> Thanks,
> Rod
>
> ------------------------ MailScanner list ------------------------ To
> unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> mailscanner' in the body of the email. Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------ To
> unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> mailscanner' in the body of the email. Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list