http://bugzilla.spamassassin.org/show_bug.cgi?id=3115

           Summary: "body" does not produce the expected results
           Product: Spamassassin
           Version: 2.63
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: major
          Priority: P3
         Component: spamassassin
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


I was attempting to write a body test to catch logo spams.  I noticed that the 
word 'logo" (or various misspellings) occurred no less than 8 times in the body 
of the message.  So I tried to write a rule that would trigger if matched 6 
times.  It didn't work.  Neither did 4 times.  It only would match with 1 or 2 
repeats.  I finally wrote a rule to show me what the body was that SA was 
working on.  To my surprise, the text body was divided into a number of 
separate pieces!  This pretty well breaks any test that needs to depend on 
counting a number of occurances to determine spam content.

Following is a similar spam from the same hosting company, followed by the body 
breakout for that spam.  You can see how the 4 paragraphs in the text body have 
been divided into 6 separate sections.

Expected results:  I expected to have a single 'body' for each mime part of the 
mail that isn't otherwise discarded.  I did not expect multiple body parts for 
a single mimie section.  As this particular spam only has a text/plain part, I 
expected only a single body.

Begin original spam:
-----------------------------------------------
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost [127.0.0.1])
        by server.ttlexceeded.com (Postfix) with ESMTP id C8DFB7B538
        for <[EMAIL PROTECTED]>; Tue, 10 Feb 2004 04:03:38 -0500 (EST)
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Tue, 10 Feb 2004 08:53:00 +0000
Received: from mail.ttlexceeded.com [207.142.132.139]
        by localhost with POP3 (fetchmail-6.2.4)
        for [EMAIL PROTECTED] (by default); Tue, 10 Feb 2004 04:03:39 -0500 
(EST)
Received: from [12.219.20.116] (helo=davidsemail.net)
        by dolphin.defaultdns.com with smtp (Exim 4.24; FreeBSD)
        id 1AqTdc-0004Zz-GV
        for [EMAIL PROTECTED]; Tue, 10 Feb 2004 08:53:00 +0000
Received: (from [EMAIL PROTECTED])
    by davidsemail.net (RS ver 1.0.86vs) with ESMTP id J87Gz035374244
    for <[EMAIL PROTECTED]>; Tue, 10 Feb 2004 03:47:29 -0500 (EST)
    (envelope-from www)
Message-ID: <[EMAIL PROTECTED]>
From: "Loris Austin" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Custom IT Solutions for Your Success
Date: Tue, 10 Feb 2004 03:47:29 -0500 (EST)
MIME-Version: 1.0
Content-Type: text/plain

Unhappy with a lot of routine work in your business? Off-shelf applications do 
not meet your specific requirements? ContinentSoft will provide you with long-
awaited relief.

We DO NOT promise to double your sales in 2 months or make you the market 
leader. But what we DO promise for you is less headache and more time to focus 
on your business.

ContinentSoft has many years' experience of dealing with customers from 
different industries and countries. Our developers are skilled in the most 
efficient technologies and tools. We have all what it takes to provide you with 
a solution tailored for your specific business, culture, and environment.

Contact us for a free consultation to find out how we can help you. Make this 
first step to your success right now!

http://www.snapshut.info/cs/
Loris Austin

______________________________________________________
Please click http://www.snapshut.info/[EMAIL PROTECTED] to 
remove your address from further mailings
______________________________________________________


----------------------------------
End original spam.

Begin body breakout of above spam:
----------------------------------
Body:
Custom IT Solutions for Your Success
End Body
Body:
Unhappy with a lot of routine work in your business? Off-shelf applications do 
not meet your specific requirements? ContinentSoft will provide you with long-
awaited relief.
End Body
Body:
We DO NOT promise to double your sales in 2 months or make you the market 
leader. But what we DO promise for you is less headache and more time to focus 
on your business.
End Body
Body:
ContinentSoft has many years' experience of dealing with customers from 
different industries and countries. Our developers are skilled in the most 
efficient technologies and tools. We have all what it takes to provide you with 
a solution tailored for your specific business, culture, and environment.
End Body
Body:
Contact us for a free consultation to find out how we can help you. Make this 
first step to your success right now!
End Body
Body:
http://www.snapshut.info/cs/ Loris Austin
End Body
Body:
______________________________________________________ Please click 
http://www.snapshut.info/[EMAIL PROTECTED] to remove your 
address from further mailings 
______________________________________________________
End Body
------------------------------
End of body breakout of original spam.

FYI: Rule used to produce above breakout:
body      PRINTBODY      /(^.*$)(?{ print "Body:\n$^N\nEnd Body\n" })/i



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to