https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6706
Bug #: 6706
Summary: SINGLE_HEADER_2K causes FP on world+dog CC
Product: Spamassassin
Version: 3.3.2
Platform: PC
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Rules
AssignedTo: [email protected]
ReportedBy: [email protected]
Classification: Unclassified
A recent notspam report showed the major rule hit was SINGLE_HEADER_2K, and the
original message was "To:" a long list of recipients.
I've lowered the score on this rule locally as a quick fix, but it should be
adjusted to ignore the To and CC headers since these can legitimately (if
stupidly) contain more than 2K of data.
Suggested change:
header SINGLE_HEADER_2K ALL:raw =~
/^(?!To|CC)(?-xim:(?=(?:^|\n)[^\s\n]+:(?:.(?!\n\S)){2048,3071}.(?:\n\S|$)))/s
A bit of digging in the stock rules shows the same change (either as above, or
modified) should probably be applied to __SINGLE_HEADER_1K, SINGLE_HEADER_3K,
SINGLE_HEADER_4K, and SINGLE_HEADER_5K as well.
--
Configure bugmail:
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
