> On Tue, 7 May 2002, Derek Broughton wrote: > > > It's unlikely to be a truly false positive - ie, it may not be spam but I > > can pretty much guarantee you that he's trying to email you from an SMTP > > server on his own, dial-up, link instead of via Earthlink's SMTP server. > > > Explain that? This user just calls earthlink. They have no knowledge of > anything else.
Dman looked a little further than I did, so I take it back :-), at least partially. It does indeed appear that the poor guy gets dinged for being from Earthlink, but you had (at least) two conditions met. KNOWN_BAD_DIALUPS is only 1.308 in my scores file (2.20). So he's still doing something odd that scores almost another 3.7 points - unless you've lowered the default threshold. If you _have_ lowered the default threshhold, you're pretty well going to have to live with false positives. If, otoh, your score is gt 1.308 for KNOWN_BAD_DIALUPS and you're on a version less than 2.20, upgrade. You have to remember that there's nothing inherently wrong in triggering any of the rules that are set lower than the threshhold, just provided that they don't hit too many of them. -- derek _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
