On Thu, 5 Apr 2018, Motty Cruz wrote:
Hello, T_RP_MATCHES_RCVD  this rule is allowing spammy emails past through. Is there a way to disable in local.cf?

simply put:

score   RP_MATCHES_RCVD         0
score   T_RP_MATCHES_RCVD       0

in case of anyone will try pushing any of these to SA.

On 05.04.18 09:32, John Hardin wrote:
The best way to disable it without breaking any meta-rules that may be using it is to set its score to 0.001 in your local config file.

meta rules are supposed to use __RP_MATCHES_RCVD - this is what
__RP_MATCHES_RCVD is for.

using T_RP_MATCHES_RCVD in meta rules should be considered a bug.

It's also useless duplicate of __RP_MATCHES_RCVD

header   T_RP_MATCHES_RCVD  eval:check_mailfrom_matches_rcvd()
header      __RP_MATCHES_RCVD      eval:check_mailfrom_matches_rcvd()



I really wonder that after multiple complaints of RP_MATCHES_RCVD someone
dared push it to rulesets again.

just a simple search:

https://lists.gt.net/spamassassin/users/166185
http://spamassassin.1065346.n5.nabble.com/RP-MATCHES-RCVD-td111557.html
http://spamassassin.1065346.n5.nabble.com/RP-MATCHES-RCVD-td107111.html
https://serverfault.com/questions/628398/spamassassin-filter-systematically-produces-negative-ham-scores-for-spam-messa

I don't see a score for it in the latest rules update, so it should by default be *adding* one point to scores, which won't contribute to FNs.

It could to contribute to FPs in such case.

I believe this hasn't been true in the past, since I have already disabled
this on some of systems we maintain in our company.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"The box said 'Requires Windows 95 or better', so I bought a Macintosh".

Reply via email to