On Monday 29 January 2007 12:27, Mike Kenny wrote: > The subject may be sufficient. I have a file in my > /etc/mail/spamassassin directory named 88_chickenpox. It seems to be > checking for various sequence of a number of alpha followed by a > punctuation character followed by a number of alpha. Any mail wit ha > base64 encoded attachment appears to trigger on many of the CHICKENPOX > rules. I believe I should disable these tests, but as I don't know what > they are meant to be trapping I am a little bit concerned. Anybody > familiar with these tests?
They were intended to detect obfuscated spams, but I think they're not really needed now that SA includes 20_drugs.cf and the ReplaceTags plugin. As you say they did FP quite often on base64, on program code, and even on ham from people who just punctuate oddly. I deleted the chickenpox ruleset when I upgraded to SA 3.1 anyway. Nick
