18.10.2009 2:22, Adam Katz kirjoitti:
Jari Fredriksson quoted himself (both on the 17th):
I have not yet analysed what whitehats cause this, but this rule seems
suspipicious to me at moment.

Now I have. Legitimate bulk mailers.

From: "NYTimes.com"<nytdir...@nytimes.com>
From: "Iltalehti.fi"<iltalehti-288-d690018e-1000350...@sp.iltalehti.fi>

Newspapers. And others. Guestionable rule.

Ah.  Interesting.  I had been suspecting either an older bug regarding
foreign characters in correct proper names had resurfaced or you had a
lot of correspondence with people who don't capitalize their names or
include a last name.

I've updated the rule so that it won't fire on any mail claiming
precedence of "bulk" or "list," which should solve that issue (and
unfortunately fire less often on real spam too).


Sadly, from those examples, NYTimes does not add Predence header to
their mail, Iltalehti does.

One with three names: The Washington Post does not trigger this rule.

There are others, like "Sun Microsystems" who luckily have two names,
but then "Microsoft" does not. Microsoft does not add Precedence header
either.

Keep in mind that this rule is only worth 0.259.

Ok. Not dangerous, as they do not trigger many other rules. Maybe
illegal characters in headers (usual in Finland, they put 8-bit chars
there without mime-encoding), and HTML_ONLY and DCC_CHECK.

Attachment: pgpdXOhVsbVsN.pgp
Description: PGP signature

Reply via email to