http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4833
[EMAIL PROTECTED] changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |[EMAIL PROTECTED]
| |uk
------- Additional Comments From [EMAIL PROTECTED] 2006-03-27 11:49 -------
The tests for dollars in the Message-Id are grossly overused.
There are at least two tests for this condition, namely:
header __MSGID_DOLLARS_OK MESSAGEID =~ /<[0-9a-f]{4,}\$[0-9a-f]{4,}\$[0-9a-
f]{4,[EMAIL PROTECTED]>/m
header __OUTLOOK_DOLLARS_MSGID MESSAGEID =~ /^<[0-9a-f]{12}\$[0-9a-f]{8}\$[0-9a
[EMAIL PROTECTED]>$/m
[by inspection the latter is a subset of the former]
These then appear in numerous, independant, metas, including:
MSGID_DOLLARS
RATWARE_MS_HASH
RATWARE_OUTLOOK_NONAME
A single header (this one is from Microsoft exchange) eg
Message-ID: <[EMAIL PROTECTED]>
will trigger all three of the above, resulting in a false positive (score 5.4
just for those three rules).
The rules need mergeing/adapting so that only one scoring rule is triggered by
such a header.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
