On Tue, 8 Dec 2020, Loren Wilton wrote:
That probably should have hit at least one scored base rule:
https://ruleqa.spamassassin.org/?rule=%2FFROM_2_
Nope. I think my rules are up to date, but maybe not.
Feel free to pastebin it and I'll take a look.
https://drive.google.com/file/d/1WQ0Mm1iUsKhTj51mFJwwehuTatSm8Nux/view?usp=sharing
That was scanned by SA? Are the SA scan results buried in the
X-VadeSecure-Cause header somehow?
It's too long to hit FROM_2_EMAILS_SHORT, and the longer message rules
that it hits (__HTML_LENGTH_1024_1536 and __PDS_HTML_LENGTH_2048) are
ham-only combos in the masscheck corpus.
I've added some new rules for masscheck eval based on it.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Journalism is about covering important stories.
With a pillow, until they stop moving. -- David Burge
-----------------------------------------------------------------------
7 days until Bill of Rights day
