[Bug 6062] New: barracude headers triggers FP on WEIRD_PORT

[bu...@bugzilla.spamassassin.org]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6062

           Summary: barracude headers triggers FP on WEIRD_PORT
           Product: Spamassassin
           Version: 3.2.5
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: scheidell@secnap.net


the inclusion of an email forwared from a barracuda, with 'headers' included,
and this in the email:


x-barracuda-url:http://10.10.20.91:8000/cgi-bin/mark.cgi

which is possible in every email outbound from a barracuda, rule triggers
'WEIRD_PORT'

suggest excluding '^x-barracuda-url:http' from WEIRD_PORT tests.


rule has low score (0.001) UNLESS BAYES OR NET NOT ACTIVE

score WEIRD_PORT 1.599 1.499 1.089 0.001

(a 1.6 score could block an email from barracuda users, again, only if a full
email, with headers is sent)


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6062] barracude headers triggers FP on WEIRD_PORT

[bu...@bugzilla.spamassassin.org]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6062





--- Comment #2 from Justin Mason <jm...@jmason.org>  2009-02-09 09:43:22 PST ---
(In reply to comment #1)
> It's an under-performer anyway. Really poor S/O. Probably better to remove it
> altogether.

I'd prefer to keep it as an informational rule (locked to 0.0001 or similar).
occasionally it shows up in bad stuff (like phishing) as a good potential
meta subrule.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6062] barracude headers triggers FP on WEIRD_PORT

[bu...@bugzilla.spamassassin.org]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6062





--- Comment #1 from Karsten Bräckelmann <gu...@rudersport.de>  2009-02-09 09:14:08 PST ---
MSECS      SPAM%     HAM%     S/O    RANK   SCORE  NAME WHO/AGE
0.00000   0.0031   0.1054   0.029    0.37    1.60  WEIRD_PORT  

It's an under-performer anyway. Really poor S/O. Probably better to remove it
altogether.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.