On 9/26/2012 6:43 PM, [email protected] wrote:
I recently got a false positive largely due to this rule:
* 3.0 SUBJ_YOUR_DEBT Subject contains "Your Bills" or similar
I think it's interesting that a rule can get scored so high when it hits
more ham than spam:
MSECS SPAM% HAM% S/O RANK SCORE NAME WHO/AGE
0 0.0115 0.0306 0.273 0.43 3.30 SUBJ_YOUR_DEBT
header SUBJ_YOUR_DEBT Subject =~ /Your (?:Bills|Debt|Credit)/i
score SUBJ_YOUR_DEBT 3.299 3.045 1.199 0.987
It is in the non sandbox rules files and also in the 10_force_active.cf.
I'm thinking that the force active should be removed and/or the rule
moved to the sandbox with a ceiling on the score of 1.0.
Thoughts?
Regards,
KAM
