On Sat, 13 Sep 2014, Axb wrote:
John
your rule RPATH_NULL_CTCQ _NULL also hits on very large part of my corpus
because a bunch of my spam feeds send with an empty envelope sender to
prevent possible bounces
see
http://ruleqa.spamassassin.org/20140913-r1624715-n/RPATH_NULL_CTCQ/detail
imo this rule should removed..
I will suppress the scored _RPATH_NULL meta rules as your feeds are
distorting the corpus.
I would note that this practice also destroys the usefulness of the
ENV_AND_HDR_FROM_MATCH and ENV_AND_HDR_SPF_MATCH rules, and possibly some
bounce-related rules as well.
Again, I would ask that you try to have your feeds use an envelope sender
that you can capture and ignore bounces to, rather than performing a major
modification of the raw spam by permanently *discarding* the
original envelope sender.
Ideally the trap would save the envelope sender (perhaps in a custom
header) and your collection system would restore that as the original
envelope sender after receipt for corpus analysis so that your internal
trap policies don't affect the quality and accuracy of your corpora.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
The fetters imposed on liberty at home have ever been forged out
of the weapons provided for defense against real, pretended, or
imaginary dangers from abroad. -- James Madison, 1799
-----------------------------------------------------------------------
4 days until the 227th anniversary of the signing of the U.S. Constitution
