https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7192

            Bug ID: 7192
           Summary: US Dollars rules FP
           Product: Spamassassin
           Version: 3.4.1
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules
          Assignee: [email protected]
          Reporter: [email protected]

I pulled a few messages out of the quarantine this evening that hit NA_DOLLARS,
US_DOLLARS_3 and MILLION_USD solely based on the fact that there was a
legitimate discussion between a CFO and their accounting firm.

Is it really the case that all that's necessary for an email to be considered
spam is a discussion of large sums of money without any other classifier?

I realize I could of course make the scores lower, but that's not good, guys.
Any Nigerian scam or other effort to extort or steal money surely would involve
some other characteristic, no?

Is there anything more that can be done here?

I bet TxRep might help, but should that be necessary?

__FRAUD_KDT ======> got hit: "USD $6,000,000"
MILLION_USD ======> got hit: "million U.S. dollars (USD"
__LOTSA_MONEY_01 ======> got hit: "$ 6,000,000"
__hk_bigmoney ======> got hit: "$ 6,000,000"
__FRAUD_DBI ======> got hit: "Euros"
NA_DOLLARS ======> got hit: "million U.S. dollar"
__LOTSA_MONEY_04 ======> got hit: "million Euros"
US_DOLLARS_3 ======> got hit: "$ 6,000,000"
__KAM_REFI4 ======> got hit: "$6,000"
__FRAUD_LTX ======> got hit: "million U.S. dollars"
__HUSH_HUSH ======> got hit: "confidentiality"

X-Spam-Report:
 * -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
 *      [208.70.234.51 listed in wl.mailspike.net]
 *  0.0 RELAYCOUNTRY_US Relayed through United States
 * -0.0 SPF_PASS SPF: sender matches SPF record
 * -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
 *      domain
 *  3.6 NA_DOLLARS BODY: Talks about a million North American dollars
 *  1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
 *  3.2 MILLION_USD BODY: Talks about millions of dollars
 *  0.0 HTML_MESSAGE BODY: HTML included in message
 *  0.1 LOC_CDIS_INLINE BODY: Content-Disposition: inline
 * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
 *      [score: 0.0000]
 *  0.0 LOTS_OF_MONEY Huge... sums of money
 * -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
 *  0.1 LOC_IMGSPAM Probably inline image
 *  0.0 SAGREY Adds 0.01 to spam from first-time senders

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to