2 messages in net.sourceforge.lists.courier-maildropRe: [maildropl] Filter guru needed: s...
FromSent OnAttachments
GawainApr 3, 2002 6:48 am 
Robert FlemingApr 3, 2002 4:29 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [maildropl] Filter guru needed: spamassassin outputActions...
From:Robert Fleming (ro@flemish.org)
Date:Apr 3, 2002 4:29:54 pm
List:net.sourceforge.lists.courier-maildrop

--On Wednesday, April 3, 2002 1:05 AM -0600 Gawain <list@guitar.net> is rumoured to have written:

I'm using spamassassin in an xfilter command and have suspected spam returned to Maildrop with the subject rewritten like this:

"SPAM xx: message_subject" or "SPAM xx.xx: message_subject"

where "xx" or "xx.xx" is either an integer or decimal number with one or two decimal places and message_subject is... the original subject of the message. The numbers are spamassassin's _HITS_ variable that denotes the apparent spamminess of the message. Spamassassin also adds an X header that is used in a simple Maildrop filter to direct suspected spam to a mailbox.

As I've been using spamassassin I've noticed that a message with a low score (say, under 10) has a slight chance of being a false positive (legitimate message) but a score over 10 is almost certainly spam. I'd like to create a filter that filters low-score spam to my spam mailbox for forensic study but high-score spam is dropped into the infinite void of /dev/null.

If you upgrade to the CVS version of spamassassin (2.20), they have added an X-Header that makes this easier. "X-Spam-Level: **********" contains one asterisk (*) for each whole-number of the HITS count. I am using the following string in my .mailfilter file (checking for HITS count >= 14) if ( /^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\**/ )