https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6993
Bug ID: 6993
Summary: TVD_PH_BODY_META hits legitimate HAM from my Credit
Union
Product: Spamassassin
Version: 3.3.2
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: P2
Component: Rules
Assignee: [email protected]
Reporter: [email protected]
it's hitting:
(quote RW on users):
It seems that
"Funds could take up to two business days to post to your account."
is hitting:
body __TVD_PH_BODY_04 /\bfunds? (?!transfer
from)(?!from)(?!in)(?!via)(?:[a-z_,-]+ )+?to your (?:[a-z_,-]+
)*?account/i
I think this one needs more work.
(/quote)
I'll attach some samples, but I think this is too wide.
----
body of ham:
This message confirms your deposit of $122.51 has been approved and processed.
Funds could take up to two business days to post to your account.
Please do not destroy the deposited check yet. Refer to our Check Handling
Procedures for check destruction guidance at www.goamplify.com/FAQ.
Please do not respond to this message or send email to this address. This
message is for information purposes only.
Thank you,
Amplify Credit Union
NOTICE OF CONFIDENTIALITY: This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.
----
Headers:
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Tue, 14 Jan 2014 15:19:28 -0600
Received: from [173.227.169.138] (port=26951 helo=webmail2.goamplify.com)
by thebighonker.lerctr.org with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.82 (FreeBSD))
(envelope-from <[email protected]>)
id 1W3BOR-000JYS-8v
for [email protected]; Tue, 14 Jan 2014 15:19:28 -0600
Received: from Tweety03 (192.168.199.67) by ExternalRelayDR.ibmtefcu.org
(192.168.220.148) with Microsoft SMTP Server id 14.2.328.9; Tue, 14 Jan
2014
15:19:16 -0600
MIME-Version: 1.0
From: <[email protected]>
To: <[email protected]>
Date: Tue, 14 Jan 2014 15:19:17 -0600
Subject: Amplify Mobile Deposit
Content-Type: multipart/alternative;
boundary="--boundary_12744_3a06d87c-647e-4558-b8ed-8f6555ebeceb"
Message-ID: <[email protected]>
X-Spam-Score: 5.2 (+++++)
X-LERCTR-Spam-Score: 5.2 (+++++)
X-Spam-Report: SpamScore (5.2/5.0)
BAYES_50=0.8,HTML_MESSAGE=0.001,RDNS_NONE=0.793,TVD_PH_BODY_META=3.625
X-LERCTR-Spam-Report: SpamScore (5.2/5.0)
BAYES_50=0.8,HTML_MESSAGE=0.001,RDNS_NONE=0.793,TVD_PH_BODY_META=3.625
X-Spam-Flag: YES
X-LERCTR-Spam-Flag: YES
---
I've asked the CU to get rDNS and to also DKIM sign, but this mail should still
not score this high.
--
You are receiving this mail because:
You are the assignee for the bug.
