You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2004/01/07 04:02:53 UTC

[Bug 2903] New: FROM_WEBMAIL_END_NUMS6 and ADDR_NUMS_AT_BIGSITE excessive

http://bugzilla.spamassassin.org/show_bug.cgi?id=2903

           Summary: FROM_WEBMAIL_END_NUMS6 and ADDR_NUMS_AT_BIGSITE
                    excessive
           Product: Spamassassin
           Version: 2.60
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: spamassassin-dev@incubator.apache.org
        ReportedBy: Bob@Menschel.net


Received a not very spammy resume today which was flagged as spam with 10.5 
points (of 9.0 required). Attached.  Of the rules which hit, the significant 
ones are: 
 2.7 ADDR_NUMS_AT_BIGSITE   Uses an address with lots of numbers, at a big ISP
 2.7 FROM_WEBMAIL_END_NUMS6 From webmail service and address ends in numbers
 1.5 MAILTO_TO_SPAM_ADDR    URI: Includes a link to a likely spammer email
 1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <http://www.spamcop.net/bl.shtml?66.218.84.48>]

Granted, webmail addresses ending in 6 digits ought to be reasonably reliable 
spamsign, but not so horribly so that it scores 5.4 when combined with 
ADDR_NUMS_AT_BIGSITE. Somehow those two rules should not be applied together 
at that full value (Those two rules will by themselves flag spam in any 
required 5.0 system.)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.