[Rick Smith, quoting Jim Paris]
> 1) If a message is spam, it should not be modified, but instead be
>    replaced by a multipart/mixed message where the first part is 
>    a text/plain containing the SpamAssassin report and the second
>    part is a message/rfc822 containing the original, unmodified
>    message.  This facilitates easy reporting to appropriate abuse@
>    administrators, and allows me to easily deal with the message as
>    if it were normal if, say, I glance through the spam folder and 
>    find a false positive.

People have talked about this, but no one has done anything.  I think
the generally preferred way to add a spam report is with

  report_header 1
  use_terse_report 1

Then SA doesn't mangle the message body.  You should also have

  rewrite_subject 0

to eliminate all message-mangling.

I can't speak for Craig, but I'm sure a patch to implement adding spam
reports by MIME-mangling would be considered.

> 2) A message in the exact same format should be sent back to the
>    original sender.  I realize that most of these will bounce, but
>    that's fine.  I want the first text/plain portion to describe why
>    and how it was rejected (with the SpamAssassin report included); 
>    I'll also use this to give them a password that they can include
>    in the subject (and to which I would assign a really negative score
>    in SpamAssassin), to ensure delivery if it was, in fact, sent by 
>    a human.  The second part, again, would be the original, unmodified
>    message/rfc822.

Everyone pretty much agrees that SpamAssassin does one thing, and does
it well: inspect an email message and decide if it's spam.  What to do
next is up to you.  Every site is different.

So far, I've only used SA with two personal email addresses; I've seen 3
or 4 false positives in the month I've been using it.  A couple were
list posts from clueless people (spammy ISP, !! in subject, etc.), but
most were either bounces of spam or posts to this list that quoted too
much spammy material.

*None* of my false positives have been mail that would be worth
responding to so that some stranger who happens to be on the same
mailing list as me can send me mail.  But that's just my experience.

        Greg
-- 
Greg Ward - software developer                [EMAIL PROTECTED]
MEMS Exchange                            http://www.mems-exchange.org

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to