On 31/10/12 15:21, Axb wrote:
On 10/31/2012 04:13 PM, Niamh Holding wrote:
Hello Andy,
Wednesday, October 31, 2012, 2:22:10 PM, you wrote:
AJ> Your message scored a 7.1 on my system.
Not a good score for ham :)
AJ> 0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
But it isn't... maybe 2 rules need amending so they don't hit genuine
UK national lottery ham.
or maybe you just lower the score for your setup.
and rethink
required=4.5
or:
if you provide a few dozen samples of these hammy msgs , they can be
included in the SA ham corpus
or:
you can directly contribute to rescoring by running a masscheck instance
as per:
http://wiki.apache.org/spamassassin/NightlyMassCheck
I'll just add that I can also confirm HK_LOTTO and HK_LOTTO_NAME
(currently scoring 3.599 and 0.998) regularly hit UK National Lottery
emails as well as UK Health Lottery emails.
I previously contacted Emailvision who is the ESP for the UK Health
Lottery to advise them their emails were scoring very heavily in SA and
recommend they maybe pre-screen outgoing emails with SA before sending
(they were being flagged as spam at default scores).
I've been working around the high scoring HK_LOTTO rules by whitelisting
with SPF. Here is what I have for the UK Health Lottery:
whitelist_from_spf *@healthlottery.co.uk
whitelist_from_spf *@*.healthlottery.co.uk
whitelist_from_spf *@health-lot.cccampaigns.com
I haven't seen high/abusive levels of mail from these domains so
consider whitelisting safe practice.
