On Thu, 16 May 2019, Amir Caspi wrote:

On Apr 26, 2019, at 4:51 PM, RW <rwmailli...@googlemail.com> wrote:

header    BOGUS_MIME_VERSION   MIME-Version =~ /^(?!\s*1\.0).+/

it may be better to change that to

  /^(?!.*\b1\.0\b).+/

to avoid punishing the form

 Mime-Version: (Nosuch Mail 2.0) 1.0

which is valid, though I don't think I've ever seen it (comments are
usually on the right).

John, so many of my spams are hitting BOGUS_MIME_VERSION that I would imagine it's worth sandboxing and incorporating into the primary ruleset.

I've added both versions as unscored rules so we can see how they perform.

This would seem to be a pretty good poison pill, and although I imagine you may not want poison pills within the primary ruleset,

They are generally not a great idea.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The premise of gun control in America is that rural conservatives
  must be disarmed because urban leftists are violent and predatory.
                                             -- Grumpy Old Fart @ TSM
-----------------------------------------------------------------------
 777 days since the first commercial re-flight of an orbital booster (SpaceX)

Reply via email to