SA/MS Testing

Steen, Glenn Glenn.Steen at AP1.SE
Wed Dec 22 10:17:19 GMT 2004


Please correct me if I'm wrong, but you'd need to "revert" the message
to it's pristine look  (meaning no headers from your server etc) before
reinjecting it(?).

-- Glenn

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Rodney Green
> Sent: den 21 december 2004 19:36
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: SA/MS Testing
> 
> 
> Thanks Alex. I did as you said. 
> 
> Odd how when I run the message through the system, by 
> telneting like you
> said, and it gives me an SA score below 5. When I run the same message
> through spamassassin using "spamassassin -t < messagefile" I 
> see a much
> higher score of 11.9. I noticed that when running 
> "spamassasin -t" that
> BAYES_99 is one of the tests listed but when I send the 
> message through the
> system I see no BAYES related tests in the message headers.
> 
> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
> Of Alex Neuman van der Hans
> Sent: Tuesday, December 21, 2004 10:53 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: SA/MS Testing
> 
> 
> Try telnetting to port 25, doing a "HELO " followed by what 
> the spammer said
> his/her hello was, then "MAIL FROM:" what the spammer said 
> the origin was,
> "RCPT TO:" to you, then DATA, and finally, the message 
> itself. A single
> period, and QUIT.
> 
> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
> Of Rodney Green
> 
> Sent: Tuesday, December 21, 2004 10:39 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: SA/MS Testing
> 
> Hello. Is there a way to re-inject a message into MailScanner 
> so it will be
> scanned again by MS/ClamAV/SpamAssassin? I've added some spam 
> to my bayes DB
> using sa-learn and would like to test sending the same spam 
> through again
> and see if it is filtered properly.
> 
> Thanks,
> Rod
> 
> ------------------------ MailScanner list ------------------------ To
> unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> mailscanner' in the body of the email. Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 
> ------------------------ MailScanner list ------------------------ To
> unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> mailscanner' in the body of the email. Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list