https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6579
Bug #: 6579
Summary: TVD_PH_BODY_ACCOUNTS_PRE hits on Twitter confirmation
e-mail
Product: Spamassassin
Version: 3.3.1
Platform: PC
OS/Version: Linux
Status: NEW
Severity: major
Priority: P2
Component: Rules
AssignedTo: [email protected]
ReportedBy: [email protected]
Classification: Unclassified
Hi,
TVD_PH_BODY_ACCOUNTS_PRE is hitting on Twitter confirmation e-mail. I don't
have a suggestion for changes to the rule, except perhaps scoring it a bit
lower. I see it is set to the following:
score TVD_PH_BODY_ACCOUNTS_PRE 1.201 1.527 1.327 2.393
Why is the last one (for bayes + net) so much higher than the others? Every
other rule seems to lower the score for bayes + net, as they add to the score
as well.
Lowering this to something like 1.2 across the board should reduce the affect
in FP'ing, yet allow it to be effective against real spam.
I have included the full message, including headers, where it would have FP'd.
In my setup, I have manually rescored the rule.
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Mon, 14 Feb 2011 15:14:50 -0330
Received: from mx005.twitter.com ([128.121.146.141])
by athena.lcwsoft.com with esmtp (Exim 4.69)
(envelope-from
<[email protected]>)
id 1Pp3Pi-0002z4-AI
for [email protected]; Mon, 14 Feb 2011 15:14:46 -0330
Received: from twitter.com (localhost [127.0.0.1])
by mx005.twitter.com (Postfix) with ESMTP id 05D71A86B8B
for <[email protected]>; Mon, 14 Feb 2011 18:44:44 +0000 (UTC)
X-DKIM: Sendmail DKIM Filter v2.8.2 mx005.twitter.com 05D71A86B8B
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=twitter.com; s=dkim;
t=1297709084; [email protected]; bh=0Is0j9KVIfTFXbIHO8bSH/ohy5g=;
h=Date:From:Reply-To:To:Message-Id:Subject:Mime-Version:
Content-Type;
b=mLXEfTMDwegt0uQY5eGiv/mMUGbAFmy4rUT7CjHRtxLKD8vT2dbPCOiKi4U+iMgm7
O+XeOYhIlkUzHDygkl9gB8Z+BDv7AERp/u83/GXvRPPGjmYFSv6aGHIjNw0lSvs16r
x5NIk7aa7NZqhT8HP2zZyBjauLqiSXXA4qTQW3Oo=
X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 mx005.twitter.com 05D71A86B8B
DomainKey-Signature: a=rsa-sha1; s=default; d=twitter.com; c=simple; q=dns;
b=xrpz9/w/1zWDj2xVM+vSV1xlQgNxyGIEvHzEAvvdPeI3ek/bbmtQdQihyFsMOYMiN
DSMVu0YbB8wzfK39VJ7Iw==
Date: Mon, 14 Feb 2011 18:44:44 +0000
From: Twitter <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-Id: <[email protected]>
Subject: Confirm your Twitter account, lcwsoft!
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary=mimepart_4d59781c4879_9d369067a94921ab
X-Campaignid: twitter20080313004044
Errors-To: Twitter
<[email protected]>
Bounces-To: Twitter
<[email protected]>
X-cPanel-MailScanner-Information: Please contact the ISP for more information
X-cPanel-MailScanner-ID: 1Pp3Pi-0002z4-AI
X-cPanel-MailScanner: Found to be clean
X-cPanel-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
score=2.419, required 5, BAYES_50 0.80, DKIM_SIGNED 0.10,
DKIM_VALID -0.10, HTML_IMAGE_ONLY_24 1.62, HTML_MESSAGE 0.00,
SPF_PASS -0.00, TVD_PH_SUBJ_ACCOUNTS_POST 0.00)
X-cPanel-MailScanner-SpamScore: ss
X-cPanel-MailScanner-From:
[email protected]
X-Spam-Status: No
--mimepart_4d59781c4879_9d369067a94921ab
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: Quoted-printable
Content-Disposition: inline
Hi, lcwsoft.
Please confirm your Twitter account by clicking this link:
http://twitter.com/account/confirm_email/lcwsoft/98CB7-9HG9B-129770
Once you confirm, you will have full access to Twitter and all future not=
ifications will be sent to this email address.
- The Twitter Team
If you received this message in error and did not sign up for a Twitter a=
ccount, click on the url below:
http://twitter.com/account/not_my_account/lcwsoft/98CB7-9HG9B-129770
Please do not reply to this message; it was sent from an unmonitored emai=
l address. This message is a service email related to your use of Twitte=
r. For general inquiries or to request support with your Twitter account=
, please contact Twitter Support by visiting: http://support.twitter.com/=
--mimepart_4d59781c4879_9d369067a94921ab
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: Quoted-printable
Content-Disposition: inline
<html>
<body lang=3D"en" style=3D"background-color:#fff; color: #222">
<div style=3D"padding:14px; margin-bottom:4px; background-color:#008eb9=
; -moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px">
<a style=3D"color:#FFF" href=3D"http://twitter.com/?from=3Demailheade=
r&utm_campaign=3Dtwitter20080313004044&utm_medium=3Demail&utm_source=3Dva=
lidate_email"><img alt=3D"Twitter" height=3D"24" src=3D"http://a3.twimg.c=
om/a/1297446951/images/twttr_bird_hd-008eb9.gif" style=3D"display:block;b=
order: 0;" width=3D"130" /></a>
</div>
<div style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-ser=
if; font-size:13px; margin: 14px; position:relative">
<h2 style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-se=
rif;margin:0 0 16px; font-size:18px; font-weight:normal">Hi, lcwsoft.</h2=
>
<p>
Please confirm your Twitter account by clicking this link:<br/>
<a href=3D"http://twitter.com/account/confirm_email/lcwsoft/98CB7-9HG9B-1=
29770?utm_campaign=3Dtwitter20080313004044&utm_medium=3Demail&utm_source=3D=
validate_email">http://twitter.com/account/confirm_email/lcwsoft/98CB7-9H=
G9B-129770</a>
</p>
<p>
Once you confirm, you will have full access to Twitter and all future n=
otifications will be sent to this email address.
</p>
<p style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;f=
ont-size: 13px; line-height:18px;border-bottom: 1px solid rgb(238, 238, 2=
38); padding-bottom: 10px;">
<span style=3D"font: italic 13px Georgia,serif; color: rgb(102, 102, =
102);">The Twitter Team</span>
=
</p>
<p style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif=
;margin-top:5px;font-size:10px;color:#888888;">
If you received this message in error and did not sign up for a Twitt=
er account, click <a href=3D'http://twitter.com/account/not_my_account/lc=
wsoft/98CB7-9HG9B-129770?utm_campaign=3Dtwitter20080313004044&utm_medium=3D=
email&utm_source=3Dvalidate_email'>not my account</a>.
</p>
<p style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;m=
argin-top:5px;font-size:10px;color:#888888;">
=
Please do not reply to this message; it was sent from an unmonitored em=
ail address. This message is a service email related to your use of Twit=
ter. For general inquiries or to request support with your Twitter accou=
nt, please visit us at <a href=3D"http://support.twitter.com/">Twitter Su=
pport</a>.
</p>
</div>
</body>
</html>
--mimepart_4d59781c4879_9d369067a94921ab--
--
Configure bugmail:
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.