It hits Pyzor for some reason. Get a PYZOR_CHECK=1.985.
Must've picked the wrong checksum, chief!
It does not appear that the actual rule matches the spirit of the rule.
On 23.09.21 22:07, Kevin A. McGrail wrote:
Jared, looks to me like an FP in Pyzor.
On Sat, 25 Sep 2021, Matus UHLAR - fantomas wrote:
RAZOR, PYZOR and DCC often hit on e-mail with short or no text and
attachments. (Haven't done stats tho, I can look during workweek.)
Thus, FSL_BULK_SIG tends to hit on such e-mail because they don't have
unsubscribe header.
On 25.09.21 13:19, John Hardin wrote:
Perhaps it needs a short-message exclusion?
On Sat, 25 Sep 2021, Matus UHLAR - fantomas wrote:
short messages with attachments. if you have an idea how, I'll be
glad to try.
On 25.09.21 15:04, John Hardin wrote:
I've done some masscheck review and tuning of it, added avoidance of
hits on very short messages.
I'm afraid it did not help.
It seems that PYZOR_CHECK and DCC_CHECK hit on such mail often and
FSL_BULK_SIG pushes such mail easily over default spam score.
I just analyze a few samples, a few also hit GMD_PDF_EMPTY_BODY
with sa -D, many of them hit __HTML_LENGTH_1024_1536
(damn microsoft! 1k of "empty" message).
OK, I will work around locally.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Saving Private Ryan...
Private Ryan exists. Overwrite? (Y/N)
