Looking at yesterday's mass-check results:

  0.445   0.4598   0.1144    0.801   0.75    2.70  MIME_BASE64_TEXT

It's not useful as a spam rule, not sure why it has such a high score.  I'd
probably just make it an info rule if anything uses it, or otherwise remove it.


On Thu, Apr 24, 2008 at 03:58:55PM +1200, Jason Haar wrote:
> Hi there
> 
> I'm getting more and more valid email from Windows environments that 
> have been totally encoded in BASE64. Mixtures of Unicode and 
> forwarding/replying seems to trigger things like Exchange to just 
> re-encode the whole thing as Base64.
> 
> Looking through our logs I can see a fair amount of mail getting scores 
> between 5-10 that contain that rule - that look like they aren't spam.
> 
> I can just reduce that score down to 0.5 to fix the problem for us  - 
> but do others think the current score of 2.7 is too high?
> 
> -- 
> Cheers
> 
> Jason Haar
> Information Security Manager, Trimble Navigation Ltd.
> Phone: +64 3 9635 377 Fax: +64 3 9635 417
> PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

-- 
Randomly Selected Tagline:
"How to heat turkey: Put turkey in oven @ 350 degrees until hot."
                                 - Supermarket turkey cooking instructions

Attachment: pgpEOIpEgnB9N.pgp
Description: PGP signature

Reply via email to