In rules/20_head_tests.cf is this comment: # Headers that seem to only be used by a single spamming software and # are found together in the same message: # 1. X-MailingID and X-ServerHost # 2. X-EM-Registration and X-EM-Version # 3. X-Stormpost-To and X-List-Unsubscribe
Today I got a completely innocent, 2-line email from someone using http://mail2web.com to access their office email from offsite. It got this spam rating: X-Spam-Checker-Version: SpamAssassin 2.31 (devel $Id: SpamAssassin.pm, v 1.94.2.2 2002/06/20 17:20:29 hughescr Exp $) X-Spam-Report: 6.6 hits, 5 required; * -0.1 -- From: no spaces in name * 1.6 -- 'Received:' has 'may be forged' warning * 1.3 -- Found a X-EM-Version header * 1.2 -- Found a X-EM-Registration header * 2.6 -- 'From:' address also used as sender's real name Having composed this, I now see that the scores for X_EM_REGISTRATION and X_EM_VER_PRESENT have been removed from rules/50_scores.cf in CVS -- but the tests themselves have not been removed from rules/20_head_tests.cf, so even in the latest versions they get the default score of 1.0 each. What's supposed to be happening to those? I thought we decided they weren't really spam indicators after all, but ... ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek PC Mods, Computing goodies, cases & more http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
