Re: [exim] exim-4.50 or exim-4.44+exiscan vs mimedefang and…

Top Page
Delete this message
Reply to this message
Author: Dennis Davis
Date:  
To: exim-users
Subject: Re: [exim] exim-4.50 or exim-4.44+exiscan vs mimedefang and useful reports
On Mon, 7 Mar 2005, Tom Kistner wrote:

> From: Tom Kistner <tom@???>
> To: tanner@???
> Cc: exim-users@???
> Date: Mon, 07 Mar 2005 20:59:45 +0100
> Subject: Re: [exim] exim-4.50 or exim-4.44+exiscan vs mimedefang and useful
>         reports

>
> Bob Tanner wrote:
>
> > Is there anyway to get more spamassassin info out of exim-4.50 or
> > exim-4.44+exiscan?
>
> Trim the report template in the SA config file. The default one is very
> verbose. There is also a (deprecated?) option to make the report "brief".


I'm using the following in Spamassassin's local.cf configuration file:


# The following should make SpamAssassin-2.60 and above reports look
# like SpamAssassin-2.55 reports.
# These lines were suggested by the message:
#
# Subject: Re: [Exim] ANNOUNCE: exiscan-acl-4.24-13
# From: "Adam D. Barratt" <exim-users@???>
# Reply-To: exim-users@???
# To: exim-users@???
# Message-Id: <1066940049.15657.35.camel@???>
# Date: Thu, 23 Oct 2003 21:14:10 +0100
#
#  DHD  January 2004
report_safe    0
clear_report_template
report _HITS_/_REQD_
report ---- Start SpamAssassin results _REPORT_
report ---- End SpamAssassin results



The above (report_safe 0) makes sure the message body isn't rewritten.
This is pointless as exim-4.50 won't use the rewritten body.

With a bit of judicious header rewriting and additions, I can get useful
spam reports similar to:

Subject: ++SPAM++ Re: 79-SCK-Druggs
X-Spam-Score: 10.6 (++++++++++)
X-Spam-Flag: YES
X-Spam-Report: 10.6/6.0
        ---- Start SpamAssassin results 
        *  2.5 SARE_SPOOF_OURI URI: URL has items in odd places
        *  2.5 SARE_SPOOF_COM2OTH URI: a.com.b.c
        *  0.1 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
        *  0.0 HTML_90_100 BODY: Message is 90% to 100% HTML
        *  0.0 HTML_MESSAGE BODY: HTML included in message
        *  0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
        *      [score: 0.4800]
        *  0.1 HTML_FONT_BIG BODY: HTML tag for a big font size
        *  1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
        *      [URIs: ddela.com]
        *  3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
        *      [URIs: ddela.com]
        *  1.1 PRIORITY_NO_NAME Message has priority, but no X-Mailer/User-Agent
        ---- End SpamAssassin results
-- 
Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK
D.H.Davis@???               Phone: +44 1225 386101