On Thu, 2009-01-29 at 18:21 +0100, Michael Monnerie wrote: > At least on our generally german e-mails, the following rules very often > cause false positives:
Rings a bell. I believe these have been brought up to FP just a few weeks ago. The scores aren't particular lightweight, and (from memory) they seem to tend to fire in batches. > They are part of 70_sare_stocks and I'd like to know if others do not > have this problem or if it's a speciality of german e-mails? > > I looked into the ruleset and found that all of the MY_CID rules refer > to spam from 2006. Maybe those rules can be dismissed by now? Due to Ninjas being busy with lives, wives & hockey matches, SARE rules aren't being updated. -- http://www.rulesemporium.com/ Probably not much luck here. Using rules which have not been mass- checked in years comes with a certain obligation... ;) You can disable them in local.cf, if you find other rules to still be efficient. guenther -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
