You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2005/06/03 21:14:01 UTC

[Bug 4388] New: SA scores PDF files as random porn, etc

http://bugzilla.spamassassin.org/show_bug.cgi?id=4388

           Summary: SA scores PDF files as random porn, etc
           Product: Spamassassin
           Version: 3.0.3
          Platform: PC
        OS/Version: FreeBSD
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Score Generation
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: scheidell@secnap.net


tail of spamassassin -L -t < email attached.

where email has a pdf attachment.
SA scores the 'random' binary in the pdf as mangled.*

looks like it does this because:
original email send from a mac with pdf attached in some strange fashion.
it was then forwarded to a outlook user who forwarded it to an ourlook user...
then it gets into SA, and we bounce it back and say 'we don't want your porn
spam'.  (not good)

X-Spam-Status: Yes, hits=18.564 tag=2 tag2=5 kill=5 tests=[AWL=-19.424,
 BAYES_99=1.886, BODY_8BITS=1.5, HTML_MESSAGE=0.001,
 HTML_TEXT_AFTER_BODY=0.061, HTML_TEXT_AFTER_HTML=0.031, MANGLED_BODY=2.3,
 MANGLED_COST=2.3, MANGLED_FQ=2.3, MANGLED_LOAN=2.3, MANGLED_LOVE=2.3,
 MANGLED_LOW=2.3, MANGLED_MEDS=2.3, MANGLED_MILFS=2.3, MANGLED_NAIL=2.3,
 MANGLED_RATES=2.3, MANGLED_SAVELE=2.3, MANGLED_SEX=2.3, MANGLED_TEXT=2.3,
 MANGLED_TOOL=2.3, MIME_ASCII0=1.5, MIME_BAD_LINEBREAK=0.5, TW_QZ=0.077,
 TW_TX=0.077, TW_ZX=0.077, TW_ZZ=0.077]



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4388] SA scores PDF files as random porn, etc

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4388


felicity@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Additional Comments From felicity@apache.org  2005-06-03 12:37 -------
Bug in the MUA, not SA.  The MIME part says it's text/plain:

Content-Type: text/plain;
        x-mac-creator=4C4D414E;
        x-mac-type=54455854;
        name="6_2_logo.pdf"
Content-Transfer-Encoding: base64

So SA treats it as text/plain.  If it was properly application/pdf, or even application/octet-stream, there 
wouldn't be an issue.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4388] SA scores PDF files as random porn, etc

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4388





------- Additional Comments From scheidell@secnap.net  2005-06-03 12:15 -------
Created an attachment (id=2922)
 --> (http://bugzilla.spamassassin.org/attachment.cgi?id=2922&action=view)
pdf bug spamassassin -L -t output.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.