[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: ADDRESS_IN_SUBJECT et al
From:       "Amir 'CG' Caspi" <cepheid () 3phase ! com>
Date:       2013-07-31 21:39:19
Message-ID: p06240805ce1f34056866 () [10 ! 0 ! 0 ! 7]
[Download RAW message or body]

At 3:23 AM +0200 07/25/2013, Karsten Bräckelmann wrote:
>   header LOCALPART_IN_SUBJECT    eval:check_for_to_in_subject('user')
>
>And all of them do hit that rule. A super-set of the ADDRESS variant,
>using the local part instead of the complete address. Still in stock
>rules.

Hmmmmm.  One of my users has received at least 
two spams in recent days with his email address 
in the Subject line.  No LOCALPART or ADDRESS 
rule hit on either email.  sa-update is running 
nightly and rules are being updated... any idea 
why this check may not have been run, and/or may 
not have hit?

I can provide a pastebin if it would be helpful.

(Also, how do I find out what Bayes tokens hit on 
an email?  Is there a plugin for this?  Is there 
any way to print out the Bayes DB in plain 
English, or are the tokens stored only as one-way 
hashes so there's no way to recover the original 
word?)

Thanks.

						--- Amir
[prev in list] [next in list] [prev in thread] [next in thread]