Re[2]: FPs on MSGID_FROM_MTA_ID

[Robert Menschel <Ro...@Menschel.net>]

Hello Stuart,

Tuesday, March 1, 2005, 8:53:38 AM, you wrote:

>> It appears to be doing the right thing. The message originated off-net,
>> but the Message-ID was added locally, which is pretty good spam-sign.
>> Frankly I wish it worked here, because I've had to create my own rule to
>> hit the same thing.

SJ> Right, it is just that I get the impression that a lot of legitimate
SJ> mail servers may be sending mail without proper Message-ID's, causing
SJ> FPs.  So, I wondered if anyone else had seen this as well.

50_scores.cf:score MSGID_FROM_MTA_ID 1.440 1.704 1.756 1.723

IMO: any rule with a score under 1/2 your spam threshold cannot be an
FP.  It's a spam suggestion, nothing more.

Rules that score over 1 are /strong/ suggestions, but suggestions
still.

They don't count as "this is spam" FPs unless enough other rules agree
that this is spam, in which case the FP is the email itself, not
necessarily any single rule.

If you're getting ham which FP, and the FP includes this rule, then
what other rules are being hit? Why does that ham look so spammy?

Bob Menschel