You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@issues.apache.org on 2010/04/12 08:55:52 UTC

[Bug 6405] New: HK_RANDOM_FROM and HK_RANDOM_ENVFROM too large

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6405

           Summary: HK_RANDOM_FROM and HK_RANDOM_ENVFROM too large
           Product: Spamassassin
           Version: 3.3.1
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: jhaar@trimble.co.nz


Hi there

HK_RANDOM_FROM  scores 2.4 and HK_RANDOM_ENVFROM scores 0.6, so if a valid user
happens to hit one of those two - they hit BOTH (because their From: matches
their RP) and end up with 3.0 points.

We just had a legit mailing-list hit by this. I'd say it would be extremely
likely for random-but-valid email addresses to hit these rules - I think they
are way too large.

I'm reducing my score for starters :-)

Jason

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6405] HK_RANDOM_FROM and HK_RANDOM_ENVFROM too large

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6405

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |kmcgrail@pccc.com
         Resolution|                            |FIXED

--- Comment #1 from Kevin A. McGrail <km...@pccc.com> 2011-10-29 01:40:14 UTC ---
Both these rules no longer exist just HK_RANDOM_ENVFROM but we will be
soliciting more mass checkers so our corpora can be improved to rescore things
automatically.

Do you possibly still have the email so we know what the valid but random
looking address was?  Then I can check to see if it still hits on the rule.  

Otherwise considering fixed for now.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.