On 9/15/2017 8:26 AM, RW wrote:
The rule was created and scored when spoofing Yahoo was very common, but it isn't any more. I don't think it's worth keeping as it is - high maintenance and error prone.
Agreed. Score FORGED_YAHOO_RCVD to zero locally and will get a bug open to deprecate it.
Regards, KAM