<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 2017-06-13 09:09 AM, Gao wrote:<br>
</div>
<blockquote type="cite"
cite="mid:5f3100c5-7a7d-3c5f-0753-f5f8f060ca0e@pztop.com">
<br>
<br>
On 2017-06-12 05:26 PM, Mark Sapiro wrote:
<br>
<blockquote type="cite">On 06/12/2017 09:00 AM, Gao wrote:
<br>
<blockquote type="cite">
<br>
On 2017-06-08 01:02 PM, Mark Sapiro wrote:
<br>
<blockquote type="cite">The reason I ask about version is this
score comes from
<br>
<br>
Mail::SpamAssassin::Plugin::HeaderEval::check_ratware_envelope_from()
<br>
<br>
Which in SA 3.4.1 at least has
<br>
<br>
return 0 if $from =~ /^SRS\d=/;
<br>
<br>
per
<br>
<a class="moz-txt-link-rfc2396E" href="https://fossies.org/dox/Mail-SpamAssassin-3.4.1/classMail_1_1SpamAssassin_1_1Plugin_1_1HeaderEval.html#ab8531c37621db88b28eb3c7dc5c97d58"><https://fossies.org/dox/Mail-SpamAssassin-3.4.1/classMail_1_1SpamAssassin_1_1Plugin_1_1HeaderEval.html#ab8531c37621db88b28eb3c7dc5c97d58></a>
<br>
<br>
which seems to be designed to exempt envelope senders
beginning with
<br>
SRS, a digit and = as this message does.
<br>
<br>
If the issue is an older SA and you can't upgrade, you can
always set
<br>
the score for RATWARE_EFROM to zero.
<br>
<br>
</blockquote>
Thank you for the help.
<br>
I am using SpamAssassin Version:3.4.0. I am not sure where to
check for
<br>
the code you mentioned. I'll make a rule to adjust the
RATWARE_EFROM score.
<br>
</blockquote>
<br>
The code is in the file Mail/SpamAssassin/Plugin/HeaderEval.pm
in your
<br>
perl installation.
<br>
<br>
</blockquote>
Interesting...
<br>
<br>
I check the HeaderEval.pm file and it does has the code you
mentioned.
<br>
<br>
And I verified it with "spamassassin --lint -D" and I see the
plugin is loaded:
<br>
Jun 13 09:01:05.782 [5433] dbg: plugin: loading
Mail::SpamAssassin::Plugin::HTMLEval from @INC
<br>
<br>
Then how come it still give a score of 3.0?
<br>
<br>
Gao
<br>
<br>
<br>
<br>
<br>
</blockquote>
Copied the wrong line. It should be:<br>
<font face="Courier New, Courier, monospace">Jun 13 09:07:41.630
[5975] dbg: plugin: loading Mail::SpamAssassin::Plugin::HeaderEval
from @INC</font><br>
<br>
BTW, why does pipe to grep not working? I did<br>
<font face="Courier New, Courier, monospace">spamassassin --lint -D
| grep HeaderEval</font><br>
And it shows all the lines from lint test.<br>
<br>
</body>
</html>