On Thu, 5 Apr 2018, Motty Cruz wrote:

Thanks for your prompt reply John,

X-Spam-Status: No, score=5.27 tagged_above=-999.9 required=5.7
        tests=[BAYES_50=4.3, FROM_EXCESS_BASE64=0.979, HTML_MESSAGE=0.001,
        T_RP_MATCHES_RCVD=-0.01] autolearn=no autolearn_force=no

always the score is -0.01 regardless; I will take your suggestion and set it to 0.01, will report back shortly.

Actually, I retract that suggestion, I wasn't aware of the special automatic scoring for T_ rules. Leave it alone.

Why do you think that a rule scoring -0.01 is responsible for FN scores?

It may be due to its use as a suppressor in some metas, but absent the full spam we can't check for that.

Thanks,


On 04/05/2018 09:32 AM, John Hardin wrote:
On Thu, 5 Apr 2018, Motty Cruz wrote:

Hello, T_RP_MATCHES_RCVD  this rule is allowing spammy emails past through. Is there a way to disable in local.cf?

The best way to disable it without breaking any meta-rules that may be using it is to set its score to 0.001 in your local config file.

I don't see a score for it in the latest rules update, so it should by default be *adding* one point to scores, which won't contribute to FNs.

What is it currently scored in your environment?

It is, however, used as a suppressor subrule in some spam meta-rules. Is that why it's causing FNs for you?



--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
 Windows and its users got mentioned at home today, after my wife the
 psych major brought up Seligman's theory of "learned helplessness."
                                             -- Dan Birchall in a.s.r
-----------------------------------------------------------------------
 8 days until Thomas Jefferson's 275th Birthday

Reply via email to