I'm seeing some false positives from the FROM_MISSP_FREEMAIL and suspect that the other FROM_MISSP_ rules scored ~4 may have similar issues. The message that brought this to my attention was a newsletter from vanguard.com.
score FROM_MISSP_FREEMAIL 4.399 3.799 4.399 3.799 score FROM_MISSP_PHISH 4.749 3.759 4.749 3.759 score FROM_MISSP_TO_UNDISC 4.100 3.999 4.100 3.999 -- Kelsey Cummings - k...@corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407