On Wed, Feb 11, 2009 at 01:13, Matt Kettler <mkettler...@verizon.net> wrote: > Karsten Bräckelmann wrote: >> On Tue, 2009-02-10 at 19:17 -0500, Matt Kettler wrote: >> >>> Maxim Masiutin wrote: >>> >> >> >>>> In The Bat!, both "Re numbering" and "X-Mailer" options are >>>> configurable in the program interface, and the user is able to >>>> independently switch them on and off, [...] >>>> >> >> >>> Interesting. The rule appears to explicitly check for messages generated >>> by The Bat! and ignores them. >>> >> >> Yup, so we get a FP for The Bat! when the user disables the X-Mailer >> option, but keeps the Re numbering. >> >> >>> Do the affected messages have an X-Mailer header containing "The Bat!"? >>> >>> Here's the relevant bits of the rule: >>> >>> header __THEBAT_MUA X-Mailer =~ /The Bat!/ >>> header __SUBJ_RE_NUM Subject =~ /^\s*Re\[\d+\]:/i >>> meta SUBJ_RE_NUM !__THEBAT_MUA && __SUBJ_RE_NUM >>> >> >> MSECS SPAM% HAM% S/O RANK SCORE NAME WHO/AGE >> 0.00000 0.0001 0.0000 1.000 0.46 2.80 SUBJ_RE_NUM >> >> That's 2 hits out of 1.7M spams in yesterday's mass-check, no FPs there >> though. Would the GA even keep that rule with a low score, or does it >> suggest rules to be dropped? (Sorry, never looked at that part yet.) >> >> > I'd be +1 on dropping it. It seems a silly criteria, and it's clearly > not effective at present.
+1
