On Mon, 5 Mar 2018 16:28:33 -0600 David Jones wrote: > On 03/05/2018 04:20 PM, John Hardin wrote: > > On Mon, 5 Mar 2018, Alex wrote: > > > >> 2.6 points for this is just unreasonable. This was a completely > >> legitimate email. > > > > What is the S/O in masscheck? > > > > http://ruleqa.spamassassin.org/20180304-r1825801-n/APOSTROPHE_TOCC/detail > > It's a high S/O in the masscheck but I don't think that alone is an > indicator of spam. I need to check my ena corpora to see what is > going on there. > > This rule should probably be limited to a max of 1.0.
Or perhaps change the rule from: header APOSTROPHE_TOCC ToCc:addr =~ /'/ to: header APOSTROPHE_TOCC ToCc:addr =~ /[^do]'/
