Spam scores in headers

[Matt Kettler]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Richard Edge wrote:
> I am running MailScanner 4.47.4, SA 3.01 

Warning: 3.0.1 is subject to a remote DoS vulnerability in its mime decoder. Any
spammer can exploit this by sending you malformed messages.

with Rules Du Jour and was
> wondering how to configure things to show all of the tests failed.
> Looking at the headers and totaling up the scores it is obvious that
> some other tests are also being triggered, but not recorded in the
> "X-MailScanner-SpamCheck:" header lines.
> 
> For example:
> 
> X-TWU-MailScanner-SpamCheck: spam, SpamAssassin (score=7.557, required
> 5,BAYES_50 0.00, HTML_90_100 0.11, HTML_IMAGE_ONLY_04 3.60,HTML_MESSAGE
> 0.00, HTML_MIME_NO_HTML_TAG 1.08,HTML_SHORT_LENGTH 1.57,
> MIME_BASE64_NO_NAME 0.22,MIME_HTML_ONLY 0.00, NO_REAL_NAME 0.96)

Any chance you have the AWL on? (note: disabling this in MailScanner.conf
doesn't work, you have to do it in /etc/mail/spamassassin/local.cf)


> 
> X-TWU-MailScanner-SpamScore: sssssss
> 
> I am using the following RDJ:
> 
> TRUSTED_RULESETS="ANTIDRUG SARE_ADULT SARE_OEM BOGUSVIRUS SARE_FRAUD
> SARE_OBFU0 SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 SARE_EVILNUMBERS2 SARE_SPOOF"

Warning: Do not use antidrug.cf with SA 3.0.0 or newer. Antidrug.cf is intended
to be used by users of SA 2.64 and older only.

As of SA 3.0.0 the rules are already built-in to SA. By loading antidrug.cf
you'll over-ride any improvements that the SA developers may have made.

I am the author of antidrug.cf, and although I haven't checked to see if the
devs have updated the rules, I am no longer maintaining this configfile
directly. Any future updates I make will likely be pushed directly to the
spamassassin project, and possibly to separate rulesets like "antidrug_31.cf", etc.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!