Matthias Fuhrmann wrote: > On Sun, 15 Feb 2004, Jens Benecke wrote: > > Hi, > >> TRACKER_ID, scored 3.5 by default, gets me lots of false positives. In >> my SPAM corpus for the last couple weeks I have about 4000 messages, 33 >> of those match TRACKER_ID, and of those 33 10 are "delivery failure" type >> messages, and four are ham. >> >> Some MTAs insert "X-ID: ..." headers that SA maybe detects as a >> TRACKER_ID. But IMHO the score of the TRACKER_ID should be lowered to >> maybe 1.5 (this would catch no FPs here, but all the SPAM messages of >> those 33). > > the regex should only work within the body. those header entries will be > ingnored: > 20_body_tests.cf:body TRACKER_ID
Yup, saw that, but I can't explain why some of my client's mail gets tagged. Can I use the regex with perl somehow to 'grep' the mail for a match? > in local.cf you can lower its score: > score TRACKER_ID 0.5 I did. For a workaround. But I still think something is not right here. -- Jens Benecke (jens at spamfreemail.de) http://www.hitchhikers.de - Europaweite kostenlose Mitfahrzentrale http://www.spamfreemail.de - 100% saubere Postf�cher - garantiert! http://www.rb-hosting.de - PHP ab 9? - SSH ab 19? - g�nstiger Traffic
