On Sat, 2009-02-21 at 03:56 +0000, Brian J. Murrell wrote: > I have a message in hand that is triggering false positives based on the > ratware rules in 3.2.4. > > The specific headers are: > > Message-ID: <blu0-smtp74e123fde12343a12de12bd1...@phx.gbl> > X-Mailer: Microsoft Outlook, Build 10.0.6838
Sounds like bug 5962 and it's friends. https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5962 > P.S. I do see that trunk is handling this combination of headers in a > fairly different manner. But that doesn't change the fact that this MUA > is causing false positives on 3.2, even with the latest (sa- > update_3.2_20081231172858 according to SVN) 3.2 udpate. Hmm, that fix also landed in the 3.2 branch, and even has been pushed out to the updates. So it isn't that one? Brian, can you please check bugzilla for similar reports [1], closed or still open, and file a new bug, if none of them is your issue? There definitely are quite a few bugs filed regarding this. Thanks! guenther [1] This one should do, in particular the more recent ones. https://issues.apache.org/SpamAssassin/buglist.cgi?long_desc_type=allwordssubstr&long_desc=blu -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
