On 6/5/2012 12:33 PM, Axb wrote:
> On 06/05/2012 06:26 PM, Christopher Tiwald wrote:
>> On Tue, Jun 05, 2012 at 11:39:29AM -0400, Kevin A. McGrail wrote:
>>> A) These are just sub rules for use in a meta.  As a specialist in
>>> meta rules, just because you hit a sub rule doesn't matter.  What
>>> matters is if it triggers a scoring rule.  Does it?
>>>
>>> B) I don't recognize those rules or know where they came from.
>>> Where did they come from?
>>>
>> The scoring rule is 4.0 JM_SOUGHT_3, which is one of the "sought
>> channel" rules distributed (and regularly updated) by the
>> sought.rules.yerp.org channel in SpamAssassin [1].
>>
>> That link is a little dated, but the channel is not. It comes stock now
>> with `yum install spamassassin` on RHEL 6, and can be added to a local
>> installation of SA by following the instructions in the link above. The
>> specific path for my vanilla install is:
>>
>> /var/lib/spamassassin/3.003002/sought_rules_yerp_org/20_sought.cf
>>
>> As far as I can tell (admittedly, I haven't studied source), it's simply
>> doing regex matching on a variety of spammy content. Nothing terribly
>> sophisticated -- the pattern matching is straight up "does this exact
>> string exist?" The problem is it's picked up artifacts of CKEditor, a
>> common CRM/CMS editor. I was able to demonstrate the problem using
>> CKEditor's demo page [2], and posted the SO question Brett cited earlier
>> [3].
> The SOUGHT rules are auto generated, several times/day by a third party 
> and not part of the SpamAssassin project.
>
> Pls paste a sample msg in pastebin. IF we can get the right person's 
> attention we may get this fixed.

Those rules don't exist in the current sought rule set.  You *are*
keeping the sought rules updated, right?

What is the date of your 20_sought.cf file?

-- 
Bowie

Reply via email to