https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7710
Bug ID: 7710
Summary: FUZZY_WALLET false positive
Product: Spamassassin
Version: 3.4.2
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Rules
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: Undefined
Hi,
we encountered a strange problem with the FUZZY_WALLET rule.
This rule should try to match this regex: /<W>(?!allet)<A><L><L><E><T>/i
but in the email there is nothing matching this pattern.
I can't provide the email and i can only access to this logs:
2019-04-30 09:32:55 rawresponse: SPAMD/1.1 0 EX_OK
Content-length: 209
Spam: False ; 2.5 / 5.0
Detailed report: (2.5 scored, 5.0 requested)
Score Rule_name Description
---- ---------------------- --------------------------------------------------
2.5 FUZZY_WALLET BODY: Obfuscated "Wallet"
2019-04-30 09:32:55 score 2.5 key FUZZY_WALLET detail BODY: Obfuscated "Wallet"
2019-04-30 09:32:55 procotol version: 1.1
2019-04-30 09:32:55 headers: {Content-length=209, Spam=False ; 2.5 / 5.0}
2019-04-30 09:32:55 threshold: 5.0
2019-04-30 09:32:55 response message: EX_OK
2019-04-30 09:32:56 score 2.5 key FUZZY_WALLET detail BODY: Obfuscated "Wallet"
This rule should only match a text like "<W><A><L><L><E><T>" (case insensitive)
right?
--
You are receiving this mail because:
You are the assignee for the bug.
