[luau] SpamAssassin and Exchange Webmail

[Warren Togami]

On Tue, 2003-07-01 at 22:03, Vince Hoang wrote:
> On Tue, Jul 01, 2003 at 05:56:46PM -1000, R. Scott Belford wrote:
> > Debian stable uses SpamAssassin 2.2 While not a recent version,
> > it does format the tagged mail so that I can read it at a later
> > time even with an html enabled reader. The spam is not put into
> > an attachment making its sordid contents easy to look over.
> 
> FWIW, one of the developers for SA is the maintainer for the
> Debian SA package. Since SA is such a moving target, I would
> really recommend moving to testing, if possible, and pinning SA
> to use the unstable package. The version of SA in stable works,
> but the version in unstable is vastly improved.
> 
> Warren mentioned earlier that the entire message is now an
> attachment in recent versions of SA rather than just the message
> portion of the message. I believe this was because the developers
> realized that the new approach was much less error prone.

Also more informative for the user because of the very clear message
body describing why the message was scored to be spam, and it prevents
the user from accidentally previewing the message and getting cracked by
an Outlook/Internet Explorer security hole due to script execution. 
Otherwise it prevents the user from alerting the spammer when Outlook
downloads images that your e-mail address is valid and active, meaning
"spam more!"

Warren