At 12:17 PM 6/29/03 -0700, Spam Sucks wrote:
Anyone know what Spamassassin is testing to trip the BUGGY_CGI sensor?
Is there a web site that lists the tests of each of the default
settings? I could only find lists of the default scores and descriptions
(even on the spamassasin.org site).

The message I get is:

BUGGY_CGI (2.8 points) Broken CGI script message

I am using a very simple and standard FormMail form on my website and
forms sent to me from my own web site are getting marked as spam!

Based on the ruleset it appears that buggy (aka relay exploitable) versions of FormMail don't identify themselves with an x-mailer header. Perhaps you should check what version of formmail you are using.


Here's the rules involved (extracted from 20_meta_tests.cf for the 2.60 cvs version that's unpacked on the website)
http://www.spamassassin.org/dist/rules/20_meta_tests.cf


header __NMS_CGI_NOT_BUGGY      X-Mailer =~ /^NMS FormMail\.pl.*v\d/
body __BUGGY_CGI                /Below is the result of your feedback form/
meta BUGGY_CGI                  __BUGGY_CGI && !__NMS_CGI_NOT_BUGGY
describe BUGGY_CGI              Broken CGI script message



I also tried giving a negative score to having a particular subject (the
subject of my form) but couldn't get that to work either.

header USED_CONTACT_FORM    Subject =~ /CONTACT/
describe USED_CONTACT_FORM  Subject: sender used contact form on web
site
score USED_CONTACT_FORM     -5.00

That should work, provided the message subject contains CONTACT in all caps... what file did you put the rule in? If you put it in user_prefs, do you have allow_user_rules enabled in your local.cf? Did you run a spamassassin --lint?




-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to