Michael Monnerie wrote: > On Mittwoch 20 Mai 2009 Michael Monnerie wrote: >> On Mittwoch 20 Mai 2009 Michael Monnerie wrote: >>> Hi, I use defang to mark mails for users. But for spam learning >>> purposes, I need to un-defang some spam going to honeypots or >>> reported by users via IMAP. >>> >>> So basically, I need a way to feed a defanged mail to a program >>> which restores the original mail, similar to what "spamassassin -d" >>> does. Is that easily possible? >> Any ideas for this one? I'd need to extract that original part for >> better spam learning. > > Being unable to automatically recover the original mail makes the > feature of defanging prevent keeping spam in a file/mbox/IMAP and later > resubmit to SpamAssassin for learning. Is nobody concerned of that? Or > is nobody using the defang feature at all? How do you use defang plus > keep a collection of spam for re-learning? > > I currently do: > 1) check for spam, if yes, defang > 2) send to users inbox > > Some users use IMAP to move spams to a spam folder which is used for re- > learning. But obviously that doesn't help, we'd need the original mail > to learn spam. > > mfg zmi
I use the "ripmime" command to extract the original message from a defanged mail, then feed it to sa-learn. You can also release a mail from quarantine to a specific email address that pipes to sa-learn using the amavisd-release command, see the man page and release notes for details. -- Noel Jones ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
