[Mimedefang] Missed Spam

James Ralston qralston+ml.mimedefang at andrew.cmu.edu
Mon Aug 11 21:55:00 EDT 2003


On 2003-08-11 at 15:30:02-0500 Will McCorkle <WMcCorkle at dgsystems.com> wrote:
> We here recently had a rash of spam come in that was not tested by
> SA.

If it wasn't tested by SpamAssassin, then that's a problem with your
mimedefang-filter file.

If what you actually meant was "SpamAssassin didn't flag this message
as spam", then modify your mimedefang-filter file so that the
X-Spam-Status header is always added, even when the message doesn't
score high enough to be considered spam.  Then you can easily see why
messages were (or weren't) flagged as spam.

Remember that some spammers actively test their spam against SA, in
order to find ways to construct their spam so that SA won't detect
them.  It's a never-ending arms race.

-- 
James Ralston, Information Technology
Software Engineering Institute
Carnegie Mellon University, Pittsburgh, PA, USA




More information about the MIMEDefang mailing list