SpamAssassin 3.4.1 released
SpamAssassin 3.4.1 released
Posted May 7, 2015 12:48 UTC (Thu) by hmh (subscriber, #3838)Parent article: SpamAssassin 3.4.1 released
An interesting addition to the Bayesian filter is the ability to hash MIME attachments and use the result as a filter token. If it works well, it should allow the filter to recognize often-repeated spam payloads as a whole. But, as the manual page notes, "not much experience has yet been gathered regarding its usefulness." It seems worth a try, in any case.
I've long been using clamav plus several long-term and fast-response spam/phishing/malware signature databases to score MIME attachments that match known signatures, and it is extremely useful, as well as very fast.
This is not done directly in SpamAssassin, though. Amavisd-new is used, as I want to score based on the clamav results, as well as test each attachment against the signature database (and not just the whole email). It calls SA should the score (mapped using a table, keyed on regex matches on the "virus name" returned by clamav) not be enough to determine the message's fate.
