On 09.01.18 10:56, Joseph Brennan wrote:
Both FSL_MIME_NO_TEXT and MIME_NO_TEXT are very similar. Both look for a
multipart/mixed message with no "text/" part that has an attachment.
Combined score is just under 5. That's a lot.
Comments?
meta FSL_MIME_NO_TEXT (__CTYPE_MULTIPART_MIXED && !__ANY_TEXT_ATTACH_DOC)
meta __MIME_NO_TEXT (__CTYPE_MULTIPART_ANY && !__ANY_TEXT_ATTACH)
meta MIME_NO_TEXT __MIME_NO_TEXT && !__BOUNCE_CTYPE &&
!__CT_ENCRYPTED && !ALL_TRUSTED && !__MSGID_APPLEMAIL &&
!__USER_AGENT_APPLEMAIL && !__HAS_IN_REPLY_TO && !__HAS_X_REF &&
!__HS_SUBJ_RE_FW && !__LCL__ENV_AND_HDR_FROM_MATCH
score FSL_MIME_NO_TEXT 3.274 1.728 3.274 1.728
score MIME_NO_TEXT 1.726 1.999 1.726 1.999
why the rest of comments is correct, this is imho a good example where
similar rules that should not have that big combined score.
looking at those scores, one of those rules should be removed, or at least a
meta should be created, lowering combined scores (aparently through mass-check)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Spam = (S)tupid (P)eople's (A)dvertising (M)ethod
