> > At least on our generally german e-mails, the following rules > very often cause false positives: > > 1.6 MY_CID_AND_CLOSING SARE cid and closing > 1.5 MY_CID_AND_STYLE SARE cid and style > 1.6 MY_CID_ARIAL2_CLOSING SARE cid arial2 closing > 1.6 MY_CID_ARIAL_STYLE SARE cid arial2 style > 1.5 MY_CID_AND_ARIAL2 SARE CID and Arial2 > > They are part of 70_sare_stocks and I'd like to know if > others do not have this problem or if it's a speciality of > german e-mails? > > I looked into the ruleset and found that all of the MY_CID > rules refer to spam from 2006. Maybe those rules can be > dismissed by now? > > mfg zmi > -- > // Michael Monnerie, Ing.BSc ----- http://it-management.at
michael, not that it will shatter the earth, yet on a lower traffic server we see this Total: 247677 Ham: 127925 Spam: 119752 70_sare_stocks.cf: Rule Name Score Ham Spam %of Ham %of Spam ----------------------------------------------------------------------- MY_CID_AND_ARIAL2 1.46 2115 274 1.65% 0.23% MY_CID_AND_CLOSING 1.60 133 97 0.10% 0.08% MY_CID_AND_STYLE 1.54 412 285 0.32% 0.24% MY_CID_FONT 0.92 81 44 0.06% 0.04% MY_CID_ARIAL2_CLOSING 1.63 6 59 0.00% 0.05% MY_CID_ARIAL_STYLE 1.58 117 171 0.09% 0.14% this is on what would be mostly "english" based emails... would that indiate we should pull these specific rules? :-) - rh
