On Mon, 11 Sep 2017 17:39:16 +0100 Sebastian Arcus wrote: > Is there any way to tell SA to skip pyzor checks on emails with an > empty body (even if there are attachments). I've noticed for a while > now that emails which don't contain any text in their bodies seem to > automatically trigger PYZOR_CHECK (even if they have an attachment) - > although they are private emails so can't possibly match the digest > of spam emails. I can only guess that Pyzor matches the digest of > empty emails automatically.
It's because pyzor is based only on a simplified version of the body text. This includes stripping any URIs or email addresses from the text. It's not just emails with no body text there are also variants of this that reduce to common phrases such as "Sent from my iPhone" > I have clients who receive important > emails from their customers just with an attachment and a subject > line - and they all seem to go to Junk - because they trigger the > PYZOR_CHECK rule - which is causing problems. Any way to deal with > this? This is why pyzor has the local_whitelist command. At very least it's a good idea to pipe an empty string through "pyzor local_whitelist" (probably as the user running spamassassin).
