On 09/11/2017 11:39 AM, Sebastian Arcus wrote:
Is there any way to tell SA to skip pyzor checks on emails with an empty
body (even if there are attachments). I've noticed for a while now that
emails which don't contain any text in their bodies seem to
automatically trigger PYZOR_CHECK (even if they have an attachment) -
although they are private emails so can't possibly match the digest of
spam emails. I can only guess that Pyzor matches the digest of empty
emails automatically. I have clients who receive important emails from
their customers just with an attachment and a subject line - and they
all seem to go to Junk - because they trigger the PYZOR_CHECK rule -
which is causing problems. Any way to deal with this?
I mostly solved this with a meta rule to subtract points when this
combination is hit:
meta ENA_EMPTY_BODY (DCC_CHECK || PYZOR_CHECK ||
DIGEST_MULTIPLE) && (TVD_SPACE_RATIO || GMD_PDF_EMPTY_BODY) && (SPF_PASS
|| DMARC_PASS || ALL_TRUSTED) && !MISSING_HEADERS
describe ENA_EMPTY_BODY Empty body emails with only
attachments.
score ENA_EMPTY_BODY -3.2
DMARC_PASS is a local rule from a local header added by OpenDMARC so
that will probably need to be removed.
--
David Jones
