[BlueOnyx:14173] Re: Solarspeed AV-SPAM V5

[Colin Jack]

Hi Michael,

Bit more

>
>>#-----------------------------------------------------
>>loadplugin Mail::SpamAssassin::Plugin::MIMEHeader
>>
>>mimeheader ZIP_ATTACHED Content-Type =~ /zip/i
>>describe ZIP_ATTACHED email contains a zip file attachment
>>score ZIP_ATTACHED 7.5
>>
>>mimeheader EXE_ATTACHED Content-Type =~ /exe/i
>>describe EXE_ATTACHED email contains a zip file attachment
>>score EXE_ATTACHED 7.5
>>
>>uri      DANGEROUS_URL /\.(exe|zip|scr|pif|php|cmd|bat|vbs|wsh)$/i
>>describe DANGEROUS_URL        URL contains executable content
>>score    DANGEROUS_URL        7.5
>>#-----------------------------------------------------

Looks like it is tagging it but not adding the score correctly:

X-Spam-Status: Yes, score=10.8 required=6.0
tests=AWL,UNPARSEABLE_RELAY,\n\tZIP_ATTACHED


I have attached a score of 20.0 to that rule Š but total score is only
10.8 in the header.
Yes, I did reload SA :)

Thanks

Colin