[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

mail bypass spamassassin



I got a mail with sample.exe (2.4MB) attachment. This mail has not been
scanned by spamassassin. I don't understand why. I use a procmail rule
as below :

# ==== SPAMASSASSIN ====
:0fw
| spamc -f

:0e
{
   EXITCODE=$?
}

:0:  
* ^X-Spam-Flag: YES
junk

# ==== End of SPAMASSASSIN section ====

And the mail header does not contain the hit normally added by
spamassassin. All other mails have this hit like below :

X-Spam-Status: No, hits=0.0 required=5.0 tests= version=2.11

Below is the header section of the mail :

From christophe.barbe.ml@imap.free.fr Thu Apr 11 18:40:47 2002
Return-path: <christophe.barbe.ml@imap.free.fr>   
Envelope-to: barbe@localhost
Delivery-date: Thu, 11 Apr 2002 18:40:47 -0400
Received: from turing ([127.0.0.1] helo=localhost)
        by turing with esmtp (Exim 3.35 #1 (Debian))
        id 16vnEm-0001ZG-00
        for <barbe@localhost>; Thu, 11 Apr 2002 18:40:16 -0400
Delivered-To: online.fr-christophe.barbe.ml@online.fr
Received: from imap.free.fr
        by localhost with IMAP (fetchmail-5.9.11)
        for barbe@localhost (single-drop); Thu, 11 Apr 2002 18:40:16 -0400 (EDT)
Received: (qmail 18191 invoked from network); 11 Apr 2002 22:15:43 -0000
Received: from unknown (HELO MONTE-XDXLXM7E7) (200.50.16.105)
  by mrelay2-2.free.fr with SMTP; 11 Apr 2002 22:15:43 -0000
From: <>
Subject:óF^BØsamplesamplebhgrh540samplebhgrh540samplebhgrh540desktopdesktopbhgrh540bhgrh54+0samplesampledesktopbhgrh540sampledesktopdesktopsampledesktopdesktopbhgrh540bhgrh540deskt+opbhgrh540desktopsamplebhgrh540samplesampledesktopdesktopdesktopsamplebhgrh540desktmx.fre+e.fr.bhgrh540
MIME-Version: 1.0
Content-Type: multipart/related;
        type="multipart/alternative";
        boundary="====_ABC123456j7890DEF_===="
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
Message-Id: <E16vnEm-0001ZG-00@turing>
Bcc:
Date: Thu, 11 Apr 2002 18:40:16 -0400

I don't even know how a mail like this can be accepted by a MTA.

Any Idea ?

Christophe

-- 
Christophe Barbé <christophe.barbe@ufies.org>
GnuPG FingerPrint: E0F6 FADF 2A5C F072 6AF8  F67A 8F45 2F1E D72C B41E

In a cat's eye, all things belong to cats.
--English proverb

Attachment: pgpfND3HlSJa5.pgp
Description: PGP signature


Reply to: