On Thu, Aug 06, 2009 at 01:50:45PM -0700, Mike Cappella wrote:
> On 8/6/09 6:31 AM, Mark Martinec wrote:
>
>> No it doesn't. Header fields names are case-insensitive.
>>
>>> A space after : is shown in every example in 2822, but I don't see a
>>> requirement that it be there.  It is extremely unusual not to see it.
>>
>> There is no requirement for a space after a colon.
>>
>> (but yes, the rest of the header field body is wrong)
>
> Perhaps useful, this has proven to be 100% no FP over the past 3 years
>
> # From w/tab
> header L_TAB_IN_FROM        ALL =~ /\nFrom:\t/s
> score  L_TAB_IN_FROM        6
>
> ymmv

Pretty good here..

OVERALL    SPAM%     HAM%     S/O    RANK   SCORE  NAME
      0    24942    79955    0.238   0.00    0.00  (all messages)
  0.676   2.7504   0.0288    0.990   0.00    0.01  T_TAB_IN_FROM

For some reason all the FPs appeared to come through MailScanner. Seems it
liked to delimit all headers with tabs? Wonder what was that.. maybe some
old version bug.

Mind if I put that in SA mass checks?

Reply via email to