[plug] Spamassasin Message Munging

[Ryan]

One way if you don't mind a change would be using spamassassin via
MailScanner, if gives you cleaner options to control these things, such
as in your case, not putting the hit spam tags in the message header.

You could then also get MailWatch running which logs to a database and
gives you a web interface to see the messages rolling in and look at the
SA tags and their associated scores for each message.

For example a recent quarantined spam via the web interface looks (a lot
prettier in html mind you) like this:

Size:41.2Kb 
Virus: N  
Blocked File: N  
Other Infection: N  

Report: 
Spam: Y   
Action(s): store 
High Scoring Spam: Y   
Action(s): store 
Listed in RBL: Y  
Whitelisted: N  
Blacklisted: N  
SpamAssassin Spam: Y  
SpamAssassin Score:15.26 

Spam Report:

      Score
  Matching Rule
   Description
5.40
BAYES_99
Bayesian spam
probability is 99
to 100%
0.10
HTML_MESSAGE
HTML included in
message
1.73
HTML_RELAYING_FRAME
Frame wanted to
load outside URL
0.10
MICROSOFT_EXECUTABLE
Message includes
Microsoft
executable program
1.84
MIME_MISSING_BOUNDARY
MIME section
missing boundary
0.10
MIME_SUSPECT_NAME
MIME filename does
not match content
1.59
MISSING_MIMEOLE
Message has
X-MSMail-Priority,
but no X-MimeOLE
3.03
MSGID_FROM_MTA_SHORT
Message-Id was
added by a relay
0.16
NO_REAL_NAME
From: does not
include a real
name
1.21
PRIORITY_NO_NAME
Message has
priority setting,
but no X-Mailer

Pretty screenshots here:

http://mailwatch.sourceforge.net/

Ryan


On Wed, 2004-11-17 at 12:49, Timothy White wrote:
> I am wondering how to change the default behaviour of SA. I still need 
> it to add the X-Spam... Headers but I don't like it adding a large 
> portion of information to the top of the message. I am using spamc to 
> pipe it through from procmail.
> I would prefer if it would add the headers and not add body but provided 
> another way for me to see which rules triggered it and what score they 
> added/subtracted from the final score.
> Also, in the emails that I am sending myself (the non spam test email 
> that came with SA) it is being marked as spam with the rule contributing 
> to it most being the Auto-whitelist adjustment[1]. It started at about 
> 300 and has gone down to 100 after sending the same non-spam email a few 
> times. What is it and how do I change it? I can see 2 binary files under 
> ~/.spamassasin that appear to be related to AWL, but I can't edit them.
> Thanks
> Tim
> [1] 100 AWL                    AWL: Auto-whitelist adjustment