2.9 FAKED_HOTMAIL_DAV X-Originating-Email header does not match From 1.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 0.0 CLICK_BELOW Asks you to click below 3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
I'm not suggesting there's anything wrong with the SA rule definitions, just providing a heads-up that ChoiceMail may be doing something stupid
It looks like choicemail is being heavily penalized for pretending messages were generated by the local mailclient, even when they were not.
Sidenote:
anyone considered this rule:
header CHOICEMAIL_CHALLENGE exists:X-ChoiceMail-Registration-Request
score CHOICEMAIL_CHALLENGE 0.1
Of course, you can opt to make the score positive or negative, large or small, depending on your personal desire to receive or filter choicemail challenges.
