Hi All,

Just noticed this come up when examining a not-spam mail that was 
flagged as spam and passed via the Low Spam Score limit.

A default regex in bombheaderre.txt will match many Date: lines in mail 
headers. I don't know exactly what spammy identifier the original regex 
was meant to match, but, since this is an "expression to identify spam", 
I am assuming that the regex was not meant to match every Date: line on 
practically every mail.

So:
\%RND(?:DIGIT|[LU]CCHAR)\[?\d+\-*\d*\]?

will match something like this:

Date: Sat, 3 May 2014 08:24:01 +0000

And add to the mail's overall blocking score, increasingly the chance of 
a false positive and blocking a good mail.

I went back through previous emails, and it looks like this regex hasn't 
matched previous to my upgrade to b14097, so I suspect the switch to 
Regexp::Optimizer might have introduced some subtle changes in how 
regexes are matched, since I was using the removed module, 
Regex::Optimizer before the upgrade.

For now, I've commented out that regex line.

-C

------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.  Get 
unparalleled scalability from the best Selenium testing platform available.
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to