On Thu, 23 Nov 2006 12:43:12 +0200, "Cristi Tudose" <[EMAIL PROTECTED]> wrote:
>Hi all . > >I have some problem with subject rewriting. > >I use qmail+vpopmail+clamav+spamassassin+qmail-scanner > >This is my local.cf > >###################### local.cf ####################### > ># Add *****SPAM***** to the Subject header of spam e-mails ># > >rewrite_header subject ****SPAM(_SCORE_)**** > ># Save spam messages as a message/rfc822 MIME attachment instead of ># modifying the original message (0: off, 2: use text/plain instead) ># >report_safe 1 > > ># Set which networks or hosts are considered 'trusted' by your mail ># server (i.e. not spammers) ># ># trusted_networks 212.17.35. > > ># Set file-locking method (flock is not safe over NFS, but is faster) ># >lock_method flock > > ># Set the threshold at which a message is considered spam (default: 5.0) ># >required_score 20.0 >required_hits 20 > ># Use Bayesian classifier (default: 1) ># >use_bayes 1 > ># Whether to use rules using the naive-Bayesian-style classifier >use_bayes_rules 1 > > >In the mail headers I see spam stuff like: > >Return-Path: <[EMAIL PROTECTED] ><https://www.prosportequipment.ro/mail/src/compose.php?send_to=lsihdefvas%40 >gmail.com> > >Delivered-To: [EMAIL PROTECTED] >Received: (qmail 15262 invoked from network); 23 Nov 2006 05:19:50 +0200 >Received: from 202.75.54.168 by mail.prosportequipment.ro (envelope-from ><[EMAIL PROTECTED] ><https://www.prosportequipment.ro/mail/src/compose.php?send_to=lsihdefvas%40 >gmail.com> >, uid 82) with qmail-scanner-1.25 > (clamdscan: 0.88.6/2205. spamassassin: 3.1.7. > Clear:RC:0(202.75.54.168):SA:1(31.4/20.0):. > Processed in 4.072865 secs); 23 Nov 2006 03:19:50 -0000 >X-Spam-Status: Yes, hits=31.4 required=20.0 >X-Spam-Level: +++++++++++++++++++++++++++++++ >X-Qmail-Scanner-Mail-From: [EMAIL PROTECTED] ><https://www.prosportequipment.ro/mail/src/compose.php?send_to=lsihdefvas%40 >gmail.com> via mail.prosportequipment.ro >X-Qmail-Scanner: 1.25 (Clear:RC:0(202.75.54.168):SA:1(31.4/20.0):. Processed >in 4.072865 secs) >Received: from unknown (HELO pc58) (202.75.54.168) > by prosportequipment.ro with SMTP; 23 Nov 2006 05:19:45 +0200 >To: <[EMAIL PROTECTED]> >From: =?iso-2022-jp?B?GyRCSjhIfhsoQg==?=<[EMAIL PROTECTED] ><https://www.prosportequipment.ro/mail/src/compose.php?send_to=lsihdefvas%40 >gmail.com> > >Subject: =?iso-2022-jp?B?GyRCJDMkbCRHJGI7ZCRPGyhC?= >MIME-Version: 1.0 >Reply-To: <[EMAIL PROTECTED] ><https://www.prosportequipment.ro/mail/src/compose.php?send_to=lsihdefvas%40 >gmail.com> > >Date: Thu, 23 Nov 2006 10:27:49 +0900 >Content-Type:text/html; charset="iso-2022-jp" >Content-Transfer-Encoding: 7bit >X-Qmail-Scanner-Message-ID: <116425198670415252@ ><https://www.prosportequipment.ro/mail/src/compose.php?send_to=1164251986704 >15252%40mail.prosportequipment.ro> @domain.com> > >Any idea where I miss something ? > >Thanks ! Try changing rewrite_header subject ****SPAM(_SCORE_)**** to rewrite_header subject ****SPAM**** KR Nigel
