Hello Guyang, Tuesday, November 16, 2004, 1:06:30 PM, you wrote:
GM> I have a Hotmail account, through which I'm subscribed to various Microsoft GM> mailing lists such as security updates, MSDN information, MCP lists, etc. GM> Microsoft's bulk mailer adds a X-Message-Info header. I fetch this mail GM> through gotmail, which then stuffs it through GM> sendmail/mimedefang/spamassassin. GM> The matched rule X_MESSAGE_INFO is worth 4.2 points. ... I'm one of the people who identified the great value of X-Message-Info headers. I've never seen one in non-spam. Checking SA's STATISTICS files, during the last scoring round this header hit 37% of all spam, and 0.0004% of non-spam. That's approximately 100 non-spam emails out of over 260,000. It's the best performing rule in the entire distribution mix. If you can identify specific Microsoft lists that use this header, open a Bugzilla bug on them, and the devs should be able to reduce the distribution score on that rule based on that practice. (I've just now subscribed to a few MS lists just to see what comes through.) GM> - attached are two examples of false-positived Microsoft mail GM> - I have also had Hewlett-Packard mail false-positived by GM> X_MESSAGE_INFO, so it's by no means exclusive to Microsoft lists Until just now I haven't belonged to MS lists, but I do receive a fair number of emails from HP, and none of them have ever included the X-Message-Info header. Can you be more specific? Bob Menschel
