Karsten Bräckelmann wrote:
> On Tue, 2009-02-10 at 19:17 -0500, Matt Kettler wrote:
>
>> Maxim Masiutin wrote:
>>
>
>
>>> In The Bat!, both “Re numbering” and “X-Mailer” options are
>>> configurable in the program interface, and the user is able to
>>> independently switch them on and off, [...]
>>>
>
>
>> Interesting. The rule appears to explicitly check for messages generated
>> by The Bat! and ignores them.
>>
>
> Yup, so we get a FP for The Bat! when the user disables the X-Mailer
> option, but keeps the Re numbering.
>
>
>> Do the affected messages have an X-Mailer header containing "The Bat!"?
>>
>> Here's the relevant bits of the rule:
>>
>> header __THEBAT_MUA X-Mailer =~ /The Bat!/
>> header __SUBJ_RE_NUM Subject =~ /^\s*Re\[\d+\]:/i
>> meta SUBJ_RE_NUM !__THEBAT_MUA && __SUBJ_RE_NUM
>>
>
> MSECS SPAM% HAM% S/O RANK SCORE NAME WHO/AGE
> 0.00000 0.0001 0.0000 1.000 0.46 2.80 SUBJ_RE_NUM
>
> That's 2 hits out of 1.7M spams in yesterday's mass-check, no FPs there
> though. Would the GA even keep that rule with a low score, or does it
> suggest rules to be dropped? (Sorry, never looked at that part yet.)
>
>
I'd be +1 on dropping it. It seems a silly criteria, and it's clearly
not effective at present.
