Michael Monnerie wrote: > On Montag 25 Mai 2009 Noel Jones wrote: >> use the "ripmime" command to extract the original message from a >> defanged mail, then feed it to sa-learn. > > Can you give a hint how you do that?
I just use: cd /tmp/sandbox ripmime -i /path/to/file The original mail, including headers, is contained in the file named "message". > I guess first you have postfix -> amavis -> spamassassin, then you > deliver the mail. Afterwards you extract it, possibly by sending the > mail via SMTP delivery into an e-mail adress which calls ripmime, but > with which parameters? Yes, you could feed the "defanged" mail to an address that pipes to "ripmime -i - -d /path/to/directory" where directory is where the extracted files will go. > Sometimes I feed spam which is not defanged, > would I need to process that differently or does ripmime recognise this? No, ripmime is a general purpose tool for extracting mime segments from a mail. In the case of a non-defanged spam, you don't need ripmime. But once the mail has gone through someone's mailbox, it's likely the message will be altered, perhaps in a non-reversible way, so you will have other issues to address. -- Noel Jones ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
