Dirk Bonengel wrote: > FYI: > rfc-ignorant.org has .de listed in whois.rfc-ignorant.com.
As others pointed out, it's listed 127.0.0.7 not .5. > > http://www.rfc-ignorant.org/tools/detail.php?domain=de&submitted=1120996396&table=whois > > In a standard 3.0.x install, DNS_FROM_RFC_WHOIS gives a score of 0.492 > (net) or 0.296 (net+bayes). However, all that said, 0.492 is a pretty small score for a rule. And that low score is a reflection of RFCI's occasional FP problems and low general hit rate on spam. Even if the rule was hitting all of .de, it really isn't that significant of a score. (Unless you're talking about nutjobs with spam thresholds set at 1.0). With such a low score, I really wouldn't worry much even if it was hitting. Unless you're dealing with nutjobs that have spam thresholds set at 1.0 it really isn't very significant. Now 3.1.0-pre1 has a higher score for it. (1.45 in set3). That I might worry a bit if it was false hitting.
