vertito writes: > I have this rule from local.cf > > body MY_harsh_content_RULE18 /cid:/is
To expand on Theo's comments, the reason this is not a good spam sign is because it'll match any email with an inline image sent by most modern email clients (definitely Outlook and Thunderbird). Scoring it at 5.0 is, then, doubly-bad, at least as a site-wide rule that others might be affected by. If you're doing this just for yourself, then at least you know what to expect.
