On Fri, 15 May 2009 02:01:34 +0200, Karsten Bräckelmann <guent...@rudersport.de> wrote: >> This made it through. As can be seen from the headers it got a 2.9 >> score only and didn't match MIME_IMAGE_ONLY which certainly would have >> pushed it over the top. > > Does match MIME_IMAGE_ONLY for me. > >> When I tried passing it to SA on the command line using 'spamassassin >> -Lt < sample-email.txt' I got: > ^^ >> 0.1 RDNS_DYNAMIC Delivered to trusted network by host with >> dynamic-looking rDNS >> 0.0 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic >> rDNS >> >> ... so virtually nothing matched. :-( Any ideas would be appreciated. > > Ahem. You ran the manual test in -L local mode. That's why the network > tests are missing. > > >> Jeremy Morton wrote: >> > Hmm, well now it's getting 6.4 from the commandline and seems to be >> > matching more appropriate rules. Maybe it was because I ran sa-update; > > Nope, you can safely run sa-update with the SA daemon up and running. No > problem. > > What do you mean, "more appropriate" rules? Do you, or don't get any > hits on that rule if it should? > > Did you --lint check? Did you do a -D debug run, to have a close look?
lint gives me no output at all. -D gives me some output, but what exactly am I supposed to be looking for? What I was getting at with MIME_IMAGE_ONLY is, is this a really fundamental test that's supposed to be defined in the tests in /usr/share/spamassassin/ ? I grep'd for it, but didn't find it. Or is it a rule that only gets put into the sa-update directory, wherever that is? What ruleset (eg. 25_antivirus.cf, etc) is it in? Best regards, Jeremy Morton (Jez)