Steven Lamb wrote: > This is interesting. I would think that this rule could cause several > false positives. For instance anyone that is a hotmail user and has a > name that matches one of those patterns. I guess if this is the case I > need to lower the score for that rule as my kill value is a 3.5, or even > worse how about anyone that is from England that writes html / text > email that has that kind of name. >
Your kill value is 3.5? ouch. Perhaps you should adjust your kill value, rather than adjusting rule scores..