--On Wednesday, April 3, 2002 1:05 AM -0600 Gawain <list...@guitar.net>
is rumoured to have written:
I'm using spamassassin in an xfilter command and have suspected spam
returned to Maildrop with the subject rewritten like this:
"SPAM xx: message_subject" or
"SPAM xx.xx: message_subject"
where "xx" or "xx.xx" is either an integer or decimal number with one or
two decimal places and message_subject is... the original subject of the
message. The numbers are spamassassin's _HITS_ variable that denotes the
apparent spamminess of the message. Spamassassin also adds an X header
that is used in a simple Maildrop filter to direct suspected spam to a
mailbox.
As I've been using spamassassin I've noticed that a message with a low
score (say, under 10) has a slight chance of being a false positive
(legitimate message) but a score over 10 is almost certainly spam. I'd
like to create a filter that filters low-score spam to my spam mailbox
for forensic study but high-score spam is dropped into the infinite void
of /dev/null.
If you upgrade to the CVS version of spamassassin (2.20), they have added
an X-Header that makes this easier.
"X-Spam-Level: **********" contains one asterisk (*) for each whole-number
of the HITS count. I am using the following string in my .mailfilter file
(checking for HITS count >= 14)
if ( /^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\**/ )