On Fri, 26 Apr 2019 14:05:35 -0600 Amir Caspi wrote: > I've been getting a bunch of FNs lately that are managing to avoid my > Bayes DB. Invariably, they ALL seem to hit on BOGUS_MIME_VERSION > (which I don't know whether is standard, but I implemented it locally > and would recommend it in the distro if it's not there already),
I think that's from this: https://readlist.com/lists/incubator.apache.org/spamassassin-users/20/103966.html where I had: header BOGUS_MIME_VERSION MIME-Version =~ /^(?!\s*1\.0).+/ it may be better to change that to /^(?!.*\b1\.0\b).+/ to avoid punishing the form Mime-Version: (Nosuch Mail 2.0) 1.0 which is valid, though I don't think I've ever seen it (comments are usually on the right). IIRC the actual spams didn't have a comment field at all.