-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I have the following problem: Some of my emails I get through a mailserver of 
my university and they're forwarded to my private account. On this server 
runs SpamAssassin with report_safe option set to 1, thus generating a new 
message with the scan results and the original message embedded as an 
attachment.

Now I also run SpamAssassin on my local computer. But my local SpamAssassin 
does not get the email in the original form (because of report_safe) and 
because of that has big problems to identify the message as spam. Almost all 
messages come though to my inbox. If I would feed the original message to my 
SpamAssassin it would detect it as spam (I tested that manually).

The admin of the university mail server could not be convinced to set 
report_safe to 0.

Now of course I could just trust the SpamAssassin of the other mailserver and 
filter my email based on its SpamLevel Header. But I do not want that. I want 
to run my own SpamAssassin with my own settings, configuration, bayes etc. I 
do not want somebody else deciding what of my emails are spam and what not.

So my question is: How can I teach SpamAssassin to handle emails in 
report_safe format differently and only use the (embedded) original email for 
analysis not the message as a whole?

As an example of what I mean, I attached such an email. You see a spam message 
embedded in a message with the result of the university's mailserver 
SpamAssassin (score 13.30) and in the headers the results of my local 
SpamAssassin (score 3.8).


Thank you,

Stephan


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFAsIhD0TAeRPnvmyERAiAUAKCHJ/DPCsj8SIwhZoah1blCf0aCAgCeIM2a
qZsHpYlR4lX4i5VbFn6nsjQ=
=6c5i
-----END PGP SIGNATURE-----
--- Begin Message ---
---- Start SpamAssassin results
13.30 points, 5 required;
* -0.4 -- Has a In-Reply-To header
*  3.4 -- Received contains a faked HELO hostname
* -0.0 -- Has a valid-looking References header
*  0.5 -- BODY: Message is 80% to 90% HTML
*  1.1 -- BODY: Bayesian classifier says spam probability is 60 to 70%
          [score: 0.6360]
*  0.2 -- BODY: FONT Size +2 and up or 3 and up
*  0.1 -- BODY: HTML font color is blue
*  1.4 -- BODY: HTML has images with 0-200 bytes of words
*  0.7 -- Date: is 12 to 24 hours after Received: date
*  0.8 -- RBL: Received via a relay in dnsbl.njabl.org
          [RBL check: found 242.111.98.211.dnsbl.njabl.org., type: 127.0.0.9]
*  1.1 -- RBL: Received via a relay in ipwhois.rfc-ignorant.org
          [RBL check: found 242.111.98.211.ipwhois.rfc-ignorant.org., type: 
127.0.0.6]
*  4.3 -- RBL: Received via a relay in opm.blitzed.org
          [RBL check: found 242.111.98.211.opm.blitzed.org., type: 127.1.0.16]
*  0.1 -- Message only has text/html MIME parts

---- End of SpamAssassin results

The original message did not contain plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

--- Begin Message ---
Title: Amazing

please wait ... loading message ...
Have you ever seen female ejaculation movies?
They are 100% AUTHENTIC ! :)











No thanks, please unsubscribe me...

--- End Message ---

--- End Message ---

Reply via email to