Re: How to save only "suspect" notspam?

tor, 04.03.2004 kl. 06.17 skrev Marc MERLIN:
> On Tue, Feb 24, 2004 at 11:32:44AM -0800, Balam Willemsen wrote:
> > Hi all,
> >  
> > I'm just migrating over to sa-exim from calling spamc from the
> system filter in exim3 and it works great!
> >  
> > One thing I was doing before though that I can't seem to figure out
> how to do now is to save mail that was scored as ham, but scored over
> some threshold. This is really useful for learning false negatives
> since it saves the main in the pristine form in which it was received
> unlike what we get back once it has been deivered to our Exchange
> server.
> >  
> > I was doing this with:
> >  
> > if ("$h_X-Spam-Status:" contains "No, ") and
> >    ("$h_X-Spam-Level:" contains "***") 
> > then
> >    unseen save /var/archives/spam/probable/$message_id
> > endif
> > 
> >  
> > I tried 
> >  
> > SAnotspamSavCond: ${if and { {match {$h_X-Spam-Status:}{"No, "}}
> {match {$h_X-Spam-Level:}{"***"}} } {1}{0}}
> >  
> > But that doesn't seem to work. I tried escaping the *s, but that
> didn't help.
> >  
> > Is there any way to do this with sa-exim without resorting to a
> system filter?
> 
> Nice idea, but it may not work because of exim not yet seeing the new
> X-Spam headers when sa-exim just added them.
> Did you check whether those even get defined by that time?

Perhaps this could be done by using a procmail - or to my mind even
better Courier maildrop (can also cope with mbox-style mailboxes, not
just Maildir) - transport.

I can't check this, unfortunately.

--Tonni

-- 

mail: billy - at - billy.demon.nl
http://www.billy.demon.nl