On 6/4/2013 10:58 PM, Alex wrote:
Should the __KAM_MX rules be so general to catch a domain that just
contains .info in it, instead of being from the .info domain?
Jun 4 22:51:39.542 [24295] dbg: rules: ran header rule __KAM_MX5
======> got hit: "smtp4.infomaniak.ch (smtp4.info"
This alone resulted in 2.0 points, creating an FP for me:
meta KAM_MX4 (__KAM_MX5)
score KAM_MX4 2.0
describe KAM_MX4 MX Record and dot info domains
associated with FAKERBL Spammers
These rules aren't really project rules but since I belong to the same
mailing list, you are correct, ideally they should be anchored to the
end but that's really not feasible. I'll lower it to a 1.0 score.
Regards,
KAM
