Re: [SAtalk] FP with backhair

2004-01-15 Thread Rolf Kraeuchi
Seems like any attachment, especially a binary such as a pdf would go over the maximum size to be scanned by SA. This must have been one tiny pdf, or you have set your SA instance to scan messages over the max size (default 250k) Most pdf's are much larger than this. i believe he attached it

Re: [SAtalk] FP with backhair

2004-01-15 Thread Martin Radford
At Wed Jan 14 19:38:33 2004, Gary Funck wrote: For the purposes of these tests how is textual parts defined? For example, in a multipart/alternative, would the tests be run both on the text part and the html part? Which MIME types are classified as text? Just for clarity, if someone

RE: [SAtalk] FP with backhair

2004-01-14 Thread Gary Funck
-Original Message- From: Rolf Kraeuchi Sent: Wednesday, January 14, 2004 10:05 AM Got my first false positive :-/ Backhair scored on a .pdf... Any hints how to avoid these? X-Spam-Status: Yes, hits=12.0 tagged_above=3.0 required=5.3 tests=J_BACKHAIR_11, J_BACKHAIR_12,

Re: [SAtalk] FP with backhair

2004-01-14 Thread Andreas Stollar
Seems like any attachment, especially a binary such as a pdf would go over the maximum size to be scanned by SA. This must have been one tiny pdf, or you have set your SA instance to scan messages over the max size (default 250k) Most pdf's are much larger than this. Andreas On Wed, 14 Jan 2004,

RE: [SAtalk] FP with backhair

2004-01-14 Thread Dallas L. Engelken
-Original Message- From: Andreas Stollar [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 14, 2004 12:39 PM To: Rolf Kraeuchi Cc: SA Subject: Re: [SAtalk] FP with backhair Seems like any attachment, especially a binary such as a pdf would go over the maximum size

Re: [SAtalk] FP with backhair

2004-01-14 Thread Fred
This will be correct in 2.7 when SA starts using their own custom MIME parser. There are some issues with the current MIME parser, so answer to Q is a fix is coming soon in the flavor of SA 2.7. Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ 810-794-4400

RE: [SAtalk] FP with backhair

2004-01-14 Thread Matt Kettler
At 01:44 PM 1/14/2004, Gary Funck wrote: I'd asked this before (with no answer on the 'dev' list), Not surprising.. unless it's part of active development work ie: discussion of methods to fix a bug, coding, test results, etc, a post of a general question to sadev will generally be ignored as

Re: [SAtalk] FP with backhair

2004-01-14 Thread Chr. von Stuckrad
On Wed, Jan 14, 2004 at 10:39:15AM -0800, Andreas Stollar wrote: Seems like any attachment, especially a binary such as a pdf would go over the maximum size to be scanned by SA. This must have been one tiny pdf, or you have set your SA instance to scan messages over the max size (default 250k)

RE: [SAtalk] FP with backhair

2004-01-14 Thread Gary Funck
Matt replied (in part): I thought it was only supposed to scan text/html attachments? I've never heard anyone claim such. Here's what the current docs. say: body SYMBOLIC_TEST_NAME /pattern/modifiers Define a body pattern test. pattern is a Perl regular expression. The 'body' in this case

Re: [SAtalk] FP with backhair

2004-01-14 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Kettler writes: At 01:44 PM 1/14/2004, Gary Funck wrote: I'd asked this before (with no answer on the 'dev' list), Not surprising.. unless it's part of active development work ie: discussion of methods to fix a bug, coding, test results,

RE: [SAtalk] FP with backhair

2004-01-14 Thread Gary Funck
Got my first false positive :-/ Backhair scored on a .pdf... Any hints how to avoid these? X-Spam-Status: Yes, hits=12.0 tagged_above=3.0 required=5.3 tests=J_BACKHAIR_11, J_BACKHAIR_12, J_BACKHAIR_13, J_BACKHAIR_14, J_BACKHAIR_21, J_BACKHAIR_22, J_BACKHAIR_31,