Thank you for your reply.

Running razor-check -d gives a lot of interesting text!

This spam (about a generic version of a medicine (?) with a name
beginning with V) has been processed by SpamAssassin 2.50 and the
original message is in a MIME part.

Passing the whole email through razor-check gives the result "not
spam".

Extracting the original spam from the MIME part and passing it
through razor-check gives the result "is known spam".

Well, the surrounding text of the whole email as received must have
changed the signature, but there have been emails which have not been
processed by SpamAssassin (one offering diplomas) which are clearly
spam but which are said _not_ to be spam.

This one (the diploma one) has two extra headers due to POPing it from
the ISP and delivering it locally but, otherwise, the text is much the
same as everybody else gets -- the To: header has four addresses on it
which presumably change during the spammer's run.

Even removing these two local headers doesn't change the decision that
it is not spam.

Obviously, the SpamAssassin processed ones must be unprocessed before
checking and, if necessary, reporting but should anything be done
about the other ones before checking/reporting?

P.S. Which exactly are the CF values in the output?

>>>>> On Fri, 28 Mar 2003 14:20:56 -0500, Matt Kettler
 <[EMAIL PROTECTED]> said:

Matt> Have you tried running the email in question through razor-check
Matt> -d to look at some of the debug output to see what the CF values
Matt> are for the individual mime parts?

>> At 04:05 PM 3/28/2003 +0000, Chris Martin wrote: I have reported 45
>> genuine spams since 31 January (all the rest were already
>> catalogued) but (for example) one reported yesterday still comes up
>> uncatalogued.


-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
Razor-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/razor-users

Reply via email to