Re: [exim] SPAM report

Top Page
Delete this message
Reply to this message
Author: George L. Yermulnik
Date:  
To: exim-users
Subject: Re: [exim] SPAM report
Hello!

On Sun, 30 Sep 2018 at 18:44:36 (+0300), Александр Кириллов via Exim-users wrote:

> Hi! There're no line breaks in spam report. Is there a way to make it more
> readable?


Here's what I use to make report readable:

main config:
SHORTNAME       = ${extract{1}{.}{$primary_hostname}}


acl_check_content:
        [...]
        add_header      = X-SHORTNAME-SA: ${sg{${sg{${sg{$spam_report}{\N\n\s*\[\N}{ [}}}{\N\n\s*(-?\d+\.\d+ [[:upper:][:digit:]_]+)\N}{\nX-SHORTNAME-SA: \$1 -> }}}{\N(\s{2,}|\t)\N}{ }}


As I've got several Exim hosts with SpamAssassin checks configured custom X-header is used to determine which host added the report, so you can easily replace "X-SHORTNAME-SA" with more common "X-Spam-Report" for you. SpamAssassin itself is configured to not output report header. Try it and tune to your needs if needed =)

> X-Spam-Report: Content analysis details:   (5.4 points, 5.0 required) pts
>  rule name              description ---- ----------------------
>  -------------------------------------------------- -0.5 BAYES_05


>   BODY: Bayes spam probability is 1 to 5% [score: 0.0355] -0.1
> DKIM_VALID_AU
>         Message has a valid DKIM or DK signature from author's domain -0.1
>  DKIM_VALID             Message has at least one valid DKIM or DK signature
>  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not
>  necessarily valid 0.0 FREEMAIL_FROM          Sender email is commonly
> abused
>  enduser mail provider (xxxxxxxx[at]gmail.com) 5.0 GTUBE
>  BODY: Generic Test for Unsolicited Bulk Email 0.0 HTML_MESSAGE
>  BODY: HTML included in message -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender
> listed
>  at http://www.dnswl.org/, no trust [209.85.221.42 listed in list.dnswl.org]
>  1.0 FROM_EXCESS_BASE64     From: base64 encoded unnecessarily


--
George L. Yermulnik
[YZ-RIPE]