https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6869

            Bug ID: 6869
           Summary: FRT_ERECTION indentical to FUZZY_ERECT
           Product: Spamassassin
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules
          Assignee: [email protected]
          Reporter: [email protected]
    Classification: Unclassified

Hi there,

I had a false positive earlier this day.

A legit email, in french, with the word "érection". Basically it's the same as
erection (like the word used in those blue pills spams) but it's still a valid
term in other contexts (the mail was talking about a construction crane being
erected).

The problem is, as stated in the summary: FRT_ERECTION is indentical to
FUZZY_ERECT.

aboyer@ludomir:~/sa-rules$ grep -r FRT_ERECTION
/var/lib/spamassassin/3.003001/updates_spamassassin_org
/var/lib/spamassassin/3.003001/updates_spamassassin_org/72_active.cf:##{
FRT_ERECTION ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
/var/lib/spamassassin/3.003001/updates_spamassassin_org/72_active.cf:body    
FRT_ERECTION           /<inter SP2><post
P2>(?!erection)<E><R><E><C><TX><IX><O><N>/i
/var/lib/spamassassin/3.003001/updates_spamassassin_org/72_active.cf:describe
FRT_ERECTION           ReplaceTags: Erection
/var/lib/spamassassin/3.003001/updates_spamassassin_org/72_active.cf:##}
FRT_ERECTION ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
/var/lib/spamassassin/3.003001/updates_spamassassin_org/72_active.cf:replace_rules
FRT_ERECTION
/var/lib/spamassassin/3.003001/updates_spamassassin_org/72_scores.cf:score
FRT_ERECTION                          2.640 3.400 2.640 3.400
aboyer@ludomir:~/sa-rules$ grep -r FUZZY_ERECT
/var/lib/spamassassin/3.003001/updates_spamassassin_org
/var/lib/spamassassin/3.003001/updates_spamassassin_org/30_text_pt_br.cf:lang
pt_BR describe FUZZY_ERECT Tentativa de esconder palavras na mensagem
/var/lib/spamassassin/3.003001/updates_spamassassin_org/50_scores.cf:score
FUZZY_ERECT 2.356 1.306 2.360 1.859
/var/lib/spamassassin/3.003001/updates_spamassassin_org/25_replace.cf:body
FUZZY_ERECT    /<inter W2><post P3>(?!erection)<E><R><E><C><T><I><O><N>/i
/var/lib/spamassassin/3.003001/updates_spamassassin_org/25_replace.cf:describe
FUZZY_ERECT    Attempt to obfuscate words in spam
/var/lib/spamassassin/3.003001/updates_spamassassin_org/25_replace.cf:replace_rules
FUZZY_ERECT

I understand that many contributers may develop identical rules, but: isn't SA
programmed to avoid such a duplicate?

Could you also explain to me how the very same rule can have two diferent
scores? isn't ruleqa ran against the entire rules? or is it only on
72_active.cf?

I suggest to simply remove one of them.

Best regards,

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to