[Mimedefang] One message missed SpamAssassin rating (Weird)

[Kevin A. McGrail]

I found that with MIMEDefang, my pet peeve was simply that it did not modify
the headers for non-SPAM emails.  This made it hard to tell if an email went
through SpamAssassin and if it DID pass the SA tests, why and what rules,
etc. and what was it's score for passing. With things like AWL and Bayesian
rules, this can be important.

Anyway, I wrote some changes to the contributed mimedefang-filter to change
it to mark email messages the way SpamAssassin does by default if you aren't
using MIMEDefang.  I published my example filter at
http://www.pccc.com/downloads/MIMEDefang/.  If you think this might help you
solve your problem, you'll want to look at the mimedefang-filter-KAM file.

Regards,
KAM

> i actually had a problem like this with sa set to 4.5 that some were
> slipping through and not being marked
>
> what i wound up doing was hard coding to 4 in md as well as sa configs and
> now it seems to work fine - some messages in the spam drop do not have my
> "POSSIBLE SPAM!!!" header but with md hard coded they are still sent to
the
> maildrop
> >
> > One email slipping by is certainly not an issue of great concern out of
> > hundreds of rejects & correct scoring.  However, it has become a
curiosity
> > and I could see how that might happen if it was a borderline call at
> > 4.9-5.1, but 19+ is a bit off borderline.
> >
> > I have very few whitelisted addresses (and this one certainly wasn't one
> of
> > them), and none in MD.  I figure if I whitelist in SA and the To: &
From:
> > headers are not correct or missing, then it needs to be scanned anyway
> > <G>  Again, this portion functions correctly.
> >
> > At the time of delivery, during the one minute period occurred, it was
the
> > only delivery in progress, so nothing should have been busy.
> >
> > My question #1 is: Has anyone had this occur to them?  And if so, were
you
> > curious enough to attempt to see what happened and figure out how it got
> by?
> >
> > #2 is, if I post all info i.e. MDCfg, features, mail log showing time
> etc.,
> > the message and anything else pertinent, would someone wish to assist in
> > figuring out this one anomaly, our would I be best off just forgetting
it?
> >
> > Thanks in advance for any advice...
> >
> > John Jaeger - Billings, Montana
> >
> > EMail To : <mailto:john at jjgb.com>
> > Home Page : <http://www.jjgb.com>
> >
> > PGP:
> > RSA Key ID: 0xAAEC7751  <http://www.jjgb.com/public_files/RSA_Key.zip>
> >
> > "Our liberty is protected by four boxes...
> >      The ballot box, the jury box, the soap box, and the cartridge box."
> >                                     - Anonymous
> >
> > _______________________________________________
> > MIMEDefang mailing list
> > MIMEDefang at lists.roaringpenguin.com
> > http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>
> _______________________________________________
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>