https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6637
Bug #: 6637
Summary: FS_REPLICA and FS_REPLICAWATCH too broad
Product: Spamassassin
Version: 3.3.1
Platform: HP
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Rules
AssignedTo: [email protected]
ReportedBy: [email protected]
Classification: Unclassified
Michael Scheidell suggested on the mailing list that FS_REPLICA and
FS_REPLICAWATCH are too broad and/or overlap. From 72_active.cf:
header FS_REPLICA Subject =~ /replica/i
describe FS_REPLICA Subject says "replica"
header FS_REPLICAWATCH Subject =~ /replica watch/i
describe FS_REPLICAWATCH Subject says Replica watch
David Skoll suggested Subject =~ /\breplica\b/i as a potential improvement for
the first, but I'm unsure what can be done about the overlap. Perhaps a
combination of metas would be an improvement? Something like:
header __FS_REPLICA Subject =~ /\breplica\b/i
header __FS_REPLICAWATCH Subject =~ /replica watch/i
meta FS_REPLICA __FS_REPLICA || __FS_REPLICAWATCH
I'm not sure what legitimate subject would hit both rules, but Mike is right
about the effect of both rules firing on one message:
50_scores.cf:score FS_REPLICA 1.630 3.599 2.028 3.599 # n=2
50_scores.cf:score FS_REPLICAWATCH 3.237 1.715 1.733 3.015 # n=2
--
Configure bugmail:
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
