You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Yves Goergen <no...@unclassified.de> on 2016/10/07 16:24:27 UTC

FROM_WORDY rule is a false-positive

Hello,

I received a message from a friend today and it was rated this, among 
others:

 > 2.5 FROM_WORDY             From address looks like a sentence

I have no idea what the author of this rule considers a sentence, but 
that line looks like it always looked, with the well-known legitimate 
address (some letters replaced with "x" for privacy):

 > From: "Fam.Hxxxxxr@t-onxxxe.de" <Fa...@t-onxxxe.de>

Does this need fixing?

Yves


Re: FROM_WORDY rule is a false-positive

Posted by John Hardin <jh...@impsec.org>.
On Fri, 7 Oct 2016, Yves Goergen wrote:

> Hello,
>
> I received a message from a friend today and it was rated this, among others:
>
>>  2.5 FROM_WORDY             From address looks like a sentence
>
> I have no idea what the author of this rule considers a sentence, but that 
> line looks like it always looked, with the well-known legitimate address 
> (some letters replaced with "x" for privacy):
>
>>  From: "Fam.Hxxxxxr@t-onxxxe.de" <Fa...@t-onxxxe.de>
>
> Does this need fixing?

It's been tuned recently. A two-"word" address like that should only hit 
if there are other spammy characteristics to the message as well.

What's the complete list of rules that hit?

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   If you are "fighting for social justice," then you are defining
   yourself as someone who considers regular old everyday
   *equal* justice to be something you don't want.       -- GOF at TSM
-----------------------------------------------------------------------
  290 days since the first successful real return to launch site (SpaceX)

Re: FROM_WORDY rule is a false-positive

Posted by Antony Stone <An...@spamassassin.open.source.it>.
On Friday 07 October 2016 at 18:24:27, Yves Goergen wrote:

> Hello,
> 
> I received a message from a friend today and it was rated this, among
> others:
>  > 2.5 FROM_WORDY             From address looks like a sentence
> 
> I have no idea what the author of this rule considers a sentence, but
> that line looks like it always looked, with the well-known legitimate
> 
> address (some letters replaced with "x" for privacy):
>  > From: "Fam.Hxxxxxr@t-onxxxe.de" <Fa...@t-onxxxe.de>
> 
> Does this need fixing?

Yes (in my opinion, at least).

Apparently that rule is firing when the sender writes their email address using 
capital letters for their name.

In my opinion that is simply penalising good grammar.


Antony.

-- 
Some mistakes are too much fun to make only once.

                                                   Please reply to the list;
                                                         please *don't* CC me.