Developers of Sympa

[Rudolf Weeber <address@concealed>]

Hi,



I have a scenario that should filter out spam. Unfortunately it seems to
fail on a random basis. (It works in 90% of the cases)

Here is the scenario:

title.us public list - suspected spam to editor
title.de ?ffentliche Liste - Spamverd?chtige Mails an den Moderator

is_subscriber([listname],[sender])             smtp,smime,md5    -> do_it
is_editor([listname],[sender])                 smtp,smime,md5    -> do_it
match([header->X-Spam-Status],/Yes/) smtp -> editorkey,quiet*
match([header->X-Spam-Report],/Yes/) smtp -> editorkey,quiet*
true()       smtp,smime,md5    -> do_it

Here is a sample message header:
(It doesn't even contain the word Yes.)
(Might it be possible, that the scenario code fails, if the headers
occour multiple times?)

X-Sympa-To: info
Return-path: <address@concealed>
Envelope-to: address@concealed
Delivery-date: Sat, 29 Jan 2005 18:53:38 +0100
Received: from mail by octopus.faveve.uni-stuttgart.de with spam-scanned 
(Exim 4.34)
        id 1Cuwmw-0004mw-D0
        for address@concealed; Sat, 29 Jan 2005 18:53:38 
+0100
Received: from lilo.faveve.uni-stuttgart.de ([129.69.139.1] ident=mail)
        by octopus.faveve.uni-stuttgart.de with esmtp (Exim 4.34)
        id 1Cuwmt-0004ml-LB
        for address@concealed; Sat, 29 Jan 2005 18:53:36 
+0100
Received: from octopus.faveve.uni-stuttgart.de ([129.69.139.20])
        by lilo.faveve.uni-stuttgart.de with esmtp (Exim 3.13 #1)
        id 1Cuwmr-0008WO-00
        for address@concealed; Sat, 29 Jan 2005 18:53:33 +0100
Received: from asgard.faveve.uni-stuttgart.de ([129.69.139.22] ident=rudolf)
        by octopus.faveve.uni-stuttgart.de with smtp (Exim 4.34)
        id 1Cuwmo-0004mY-DD
        for address@concealed; Sat, 29 Jan 2005 18:53:34 +0100
Received: by asgard.faveve.uni-stuttgart.de (sSMTP sendmail emulation); Sat, 
29 Jan 2005 18:53:28 +0100
Date: Sat, 29 Jan 2005 18:53:28 +0100
From: Rudolf Weeber <address@concealed>
To: address@concealed
Subject: Mailinglistenuebersicht
Message-ID: <address@concealed>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
X-Sieve: CMU Sieve 2.2
X-FaVeVe-Spam-Score: -4.7 (----)
X-Spam-Report: No Score: -4.7 Tests: ALL_TRUSTED,AWL,BAYES_00
User-Agent: Mutt/1.5.6+20040907i
X-FaVeVe-Spam-Score: -4.9 (----)
X-Spam-Report: No Score: -4.9 Tests: ALL_TRUSTED,AWL,BAYES_00
X-FaVeVe-Spam-Score: -5.0 (-----)
X-Spam-Report: No Score: -5.0 Tests: ALL_TRUSTED,AWL,BAYES_00
X-DSPAM-Result: Innocent
X-DSPAM-Confidence: 1.0000
X-DSPAM-Probability: 0.0023


Could you look in to that? (Because I really ran out of ideas...)

Thanks in advance, Rudolf