Hi, On Mon, Apr 2, 2018 at 8:10 AM, Kevin A. McGrail <kmcgr...@apache.org> wrote: > Pastebin a sample(s).
We're also seeing it hit mailer-daemon emails. https://pastebin.com/raw/UXnzEN8U This one also hit FUZZY_AMBIEN, POISEN_SPAM_PILL (spelling incorrect) and when I re-ran it here locally, FUZZY_DR_OZ. The problem is that it's hitting on the mime attachments which are apparently treated as body text in mailer-daemon emails. ran body rule FUZZY_AMBIEN ======> got hit: "GRm8iEn" ran body rule __FUZZY_DR_OZ ======> got hit: "DGCGS+" ran body rule FUZZY_XPILL ======> got hit: "xxgnoX"