[Mimedefang] SA - MIME attachments?

Jon Fullmer jon at jonfullmer.com
Thu Oct 27 00:33:36 EDT 2005


I realize this may be more appropriate for the SpamAssassin list, but I
thought I'd check here first.

I'm using MIMEDefang 2.53 and SpamAssassin 3.1 with Sendmail 8.13.5.

I've been writing a lot of custom rules for SpamAssassin to target specific
domain names mentioned within an e-mail.  A usual rule will be something
along the lines of:

body       PORN_SPAM       /(?:porn.com|porn-site.com|pr0n.com)/I
describe   PORN_SPAM      Some jerk sending me porn spam
score PORN_SPAM 10.0

I've noticed that when I do this, though, if the e-mail is a multipart MIME
message (with, say, one part "text/plain" and one part "text/html"), it
won't find the string I'm having it search for.  In the above example, if
some "text/html" portion of the message contains "porn.com", the rule won't
be tripped.  

Obviously, I wouldn't want to search ALL MIME parts, as some may be images,
etc., but is there a way I can tell SA to search text/plain and text/html
parts (as well as the standard message body)?

Thanks in advance.

 - Jon




More information about the MIMEDefang mailing list