I changed the rules as you suggested, but e-mails with exe attachments are still not being marked as SPAM. However, others are. Following are the headers from an e-mail sent with an exe attachment.
<div class="Jedi">These are not the headers you are looking for</div>
You need the MIME headers from the body of the message to ensure that the name is, in fact, supposed to match.
To: [EMAIL PROTECTED]
Subject: EXE Test 1 - exe
Content-Type: multipart/mixed; boundary="------------050409040702070007040104"
X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on mnea-hq.mnea.org
X-Spam-Level:
X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.64
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 29 Sep 2004 22:12:44.0170 (UTC) FILETIME=[71AA06A0:01C4A671]
If I am reading the headers correctly, it appears the attachment tests were not done in this case. The file attached to the message was vncviewer.exe.
Is the total size over 256K? (or whatever your threshold is set to)?
--
I'm sitting here with 4 Megs of RAM trying to figure out how to use it all... :-) (Me, in 1990)
smime.p7s
Description: S/MIME cryptographic signature
