Hello Matt,

Tuesday, June 8, 2004, 9:45:57 AM, you wrote:

MK> At 12:31 PM 6/8/2004, Jim Sabatke wrote:
>>I get Washington Post email notices many times a day.  I want them.  SA 
>>marks about 1/4 of them as spam.  It doesn't seem to matter how often I 
>>run them through the "ham" sa-learn.
>>
>>Here is an SA analysis:

>>Content analysis details:   (5.20 points, 5 required)
>>RATWARE_HASH_2_V2  (1.1 points)  Bulk email software fingerprint (hash 2 
>>v2) found in headers
>>RATWARE_HASH_2     (1.9 points)  Bulk email software fingerprint (hash 2) 
>>found in headers

MK> Seems like the largest score-contributors to your problem are these two 
MK> rules.. Perhaps you should consider disabling these SARE rules (those are 
MK> NOT stock spamassassin rules)? Those two alone are 3.0 points for your 
+5.20.

Matt, good catch, but where in SARE do you find them?  I don't find
these in my copies of the ratware nor header_abuse cf files.

Jim -- can you find out where you have these rules loaded from?

And if they are SARE rules, can you forward an original copy of the
Washington Post email(s) to SARE (c/o me is OK), so we can figure out
how to recode them or rescore them?

Thanks.



-- 
Best regards,
 Bob                            mailto:[EMAIL PROTECTED]

Reply via email to