On Sun, 15 Feb 2004, Jens Benecke wrote: Hi,
> TRACKER_ID, scored 3.5 by default, gets me lots of false positives. In my > SPAM corpus for the last couple weeks I have about 4000 messages, 33 of > those match TRACKER_ID, and of those 33 10 are "delivery failure" type > messages, and four are ham. > > Some MTAs insert "X-ID: ..." headers that SA maybe detects as a TRACKER_ID. > But IMHO the score of the TRACKER_ID should be lowered to maybe 1.5 (this > would catch no FPs here, but all the SPAM messages of those 33). the regex should only work within the body. those header entries will be ingnored: 20_body_tests.cf:body TRACKER_ID in local.cf you can lower its score: score TRACKER_ID 0.5 regards, Matthias
