I got a mail with sample.exe (2.4MB) attachment. This mail has not been
scanned by spamassassin. I don't understand why. I use a procmail rule
as below :
# ==== SPAMASSASSIN ====
:0fw
| spamc -f
:0e
{
EXITCODE=$?
}
:0:
* ^X-Spam-Flag: YES
junk
# ==== End of SPAMASSASSIN section ====
And the mail header does not contain the hit normally added by
spamassassin. All other mails have this hit like below :
X-Spam-Status: No, hits=0.0 required=5.0 tests= version=2.11
Below is the header section of the mail :
From christophe.barbe.ml@imap.free.fr Thu Apr 11 18:40:47 2002
Return-path: <christophe.barbe.ml@imap.free.fr>
Envelope-to: barbe@localhost
Delivery-date: Thu, 11 Apr 2002 18:40:47 -0400
Received: from turing ([127.0.0.1] helo=localhost)
by turing with esmtp (Exim 3.35 #1 (Debian))
id 16vnEm-0001ZG-00
for <barbe@localhost>; Thu, 11 Apr 2002 18:40:16 -0400
Delivered-To: online.fr-christophe.barbe.ml@online.fr
Received: from imap.free.fr
by localhost with IMAP (fetchmail-5.9.11)
for barbe@localhost (single-drop); Thu, 11 Apr 2002 18:40:16 -0400 (EDT)
Received: (qmail 18191 invoked from network); 11 Apr 2002 22:15:43 -0000
Received: from unknown (HELO MONTE-XDXLXM7E7) (200.50.16.105)
by mrelay2-2.free.fr with SMTP; 11 Apr 2002 22:15:43 -0000
From: <>
Subject:óF^BØsamplesamplebhgrh540samplebhgrh540samplebhgrh540desktopdesktopbhgrh540bhgrh54+0samplesampledesktopbhgrh540sampledesktopdesktopsampledesktopdesktopbhgrh540bhgrh540deskt+opbhgrh540desktopsamplebhgrh540samplesampledesktopdesktopdesktopsamplebhgrh540desktmx.fre+e.fr.bhgrh540
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="====_ABC123456j7890DEF_===="
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
Message-Id: <E16vnEm-0001ZG-00@turing>
Bcc:
Date: Thu, 11 Apr 2002 18:40:16 -0400
I don't even know how a mail like this can be accepted by a MTA.
Any Idea ?
Christophe
--
Christophe Barbé <christophe.barbe@ufies.org>
GnuPG FingerPrint: E0F6 FADF 2A5C F072 6AF8 F67A 8F45 2F1E D72C B41E
In a cat's eye, all things belong to cats.
--English proverb
Attachment:
pgppLPKKWZzEe.pgp
Description: PGP signature