On Mon, 2004-12-13 at 12:56, Leonardo Helman wrote:
> Hi, how are you calling sa?
>
>
>
> Are you sure nobody is cutting your .doc because
>
> it was too large or something like that?
>
> So the sa is receiving only the first part?
>
>
>
>
SA runs as a daemon and is called from within exim by exiscan. The
server is a big new Dell with 4 GB of ram, and the attached doc is only
small. The spam report is
Content analysis details: (9.3 points, 6.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
1.4 HTML_40_50 BODY: Message is 40% to 50% HTML
0.7 HTML_MESSAGE BODY: HTML included in message
1.4 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
0.8 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
3.4 MIME_BOUND_NEXTPART Spam tool pattern in MIME boundary
And it is this last 3.4 job that I do not understand, what does it mean.
Ron
>
> --
>
> Leonardo Helman
>
> Pert Consultores
>
> Argentina
>
>
>
>
> On Mon, Dec 13, 2004 at 11:04:41AM +0000, Ron McKeating wrote:
> > Hi all, just had a user complaining that we filtered a mail that should
> > not have been blocked (we stick them in a separate folder called
> > Filtered_SPAM).
> >
> > I am intrigued by the rule
> >
> > * 3.4 MIME_BOUND_NEXTPART Spam tool pattern in MIME boundary
> >
> > What does this mean?
> >
> > The nextpart of the email is
> >
> > This is a multi-part message in MIME format.
> >
> >
> > ------=_NextPart_000_308f_1cba_6608
> > Content-Type: text/html; format=flowed
> >
> > This was a perfectly normal email with a word doc attached.
> >
> > Any advice appreciated.
> >
> > Ron
> >
> > --
> > Ron McKeating
> > Senior IT Services Specialist
> > Internet Services and Software Solutions
> > Loughborough University
> > 01509 222329
--
Ron McKeating
Senior IT Services Specialist
Internet Services and Software Solutions
Loughborough University
01509 222329
