You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2006/03/18 11:09:05 UTC
[Bug 4833] New: False Positive with MSGID_DOLLARS_RANDOM
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4833
Summary: False Positive with MSGID_DOLLARS_RANDOM
Product: Spamassassin
Version: 3.1.1
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P5
Component: Rules
AssignedTo: dev@spamassassin.apache.org
ReportedBy: dhawal@netmagicsolutions.com
A regular mail hit the meta MSGID_DOLLARS_RANDOM
Message-ID: <75...@ipop>
X-Mailer: Intrapop 1.4 SMTP Component 1.0
The X-Mailer indicates that the message was sent using a product developed by
cyberoam.com
A mail to the sa-users didn't get any replies, hence am posting it to bugzilla.
- dhawal
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4833] False Positive with MSGID_DOLLARS_RANDOM
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4833
------- Additional Comments From jm@jmason.org 2007-01-05 08:46 -------
please attach sample messages.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4833] False Positive with MSGID_DOLLARS_RANDOM
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4833
apachebugs@paradisegreen.co.uk changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |apachebugs@paradisegreen.co.
| |uk
------- Additional Comments From apachebugs@paradisegreen.co.uk 2006-03-27 11:49 -------
The tests for dollars in the Message-Id are grossly overused.
There are at least two tests for this condition, namely:
header __MSGID_DOLLARS_OK MESSAGEID =~ /<[0-9a-f]{4,}\$[0-9a-f]{4,}\$[0-9a-
f]{4,}\@\S+>/m
header __OUTLOOK_DOLLARS_MSGID MESSAGEID =~ /^<[0-9a-f]{12}\$[0-9a-f]{8}\$[0-9a
-f]{8}\@\S+>$/m
[by inspection the latter is a subset of the former]
These then appear in numerous, independant, metas, including:
MSGID_DOLLARS
RATWARE_MS_HASH
RATWARE_OUTLOOK_NONAME
A single header (this one is from Microsoft exchange) eg
Message-ID: <00...@valehousing.co.uk>
will trigger all three of the above, resulting in a false positive (score 5.4
just for those three rules).
The rules need mergeing/adapting so that only one scoring rule is triggered by
such a header.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.