Re: [exim] SPAM report

Top Pagina
Delete this message
Reply to this message
Auteur: Александр Кириллов
Datum:  
Aan: exim-users
Onderwerp: Re: [exim] SPAM report
Thanks for sharing, George! The idea is to split the report into several
headers. Got it. I wonder if it's possible to pad the report lines so they
would fold naturally at the right places.

вс, 30 сент. 2018 г. в 20:51, George L. Yermulnik via Exim-users <
exim-users@???>:

> Hello!
>
> On Sun, 30 Sep 2018 at 18:44:36 (+0300), Александр Кириллов via Exim-users
> wrote:
>
> > Hi! There're no line breaks in spam report. Is there a way to make it
> more
> > readable?
>
> Here's what I use to make report readable:
>
> main config:
> SHORTNAME       = ${extract{1}{.}{$primary_hostname}}

>
> acl_check_content:
>         [...]
>         add_header      = X-SHORTNAME-SA:
> ${sg{${sg{${sg{$spam_report}{\N\n\s*\[\N}{ [}}}{\N\n\s*(-?\d+\.\d+
> [[:upper:][:digit:]_]+)\N}{\nX-SHORTNAME-SA: \$1 -> }}}{\N(\s{2,}|\t)\N}{ }}

>
> As I've got several Exim hosts with SpamAssassin checks configured custom
> X-header is used to determine which host added the report, so you can
> easily replace "X-SHORTNAME-SA" with more common "X-Spam-Report" for you.
> SpamAssassin itself is configured to not output report header. Try it and
> tune to your needs if needed =)
>
> > X-Spam-Report: Content analysis details:   (5.4 points, 5.0 required) pts
> >  rule name              description ---- ----------------------
> >  -------------------------------------------------- -0.5 BAYES_05

>
> >   BODY: Bayes spam probability is 1 to 5% [score: 0.0355] -0.1
> > DKIM_VALID_AU
> >         Message has a valid DKIM or DK signature from author's domain
> -0.1
> >  DKIM_VALID             Message has at least one valid DKIM or DK
> signature
> >  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not
> >  necessarily valid 0.0 FREEMAIL_FROM          Sender email is commonly
> > abused
> >  enduser mail provider (xxxxxxxx[at]gmail.com) 5.0 GTUBE
> >  BODY: Generic Test for Unsolicited Bulk Email 0.0 HTML_MESSAGE
> >  BODY: HTML included in message -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender
> > listed
> >  at http://www.dnswl.org/, no trust [209.85.221.42 listed in
> list.dnswl.org]
> >  1.0 FROM_EXCESS_BASE64     From: base64 encoded unnecessarily

>
> --
> George L. Yermulnik
> [YZ-RIPE]
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>