32: Only Mildly Suspicious
Rspamd is the best solution we have for managing spam, and that’s… kind of terrifying.
Consider the first symbol, URI_COUNT_ODD. The description reads “Odd number of URIs in multipart/alternative message.” The message has an odd number of pieces. Why is that important, though? Rspamd does not say. You must derive the deeper meaning from your understanding of the protocols and tools. In this case, this is an HTML message. HTML messages should have one MIME part for the text version, and another part for the HTML version. This particular message also has an attachment, so that’s a…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.