MCP suggestions

[Martin Hepworth]

Billy A. Pumphrey wrote:
<snip>
> 
> I don't want to put vague rules in there and have false positives.  Here
> is an example email that slipped through:
> 
<snip>
Billy

here are the rules that fired on that memail on by system.
Forgetting the ALL_TRUSTED misfire (hmm where'd that come from must 
check my spam.assassin.prefs.conf)

  pts rule name              description
---- ---------------------- 
--------------------------------------------------
  0.0 MISSING_DATE           Missing Date: header
-2.8 ALL_TRUSTED            Did not pass through any untrusted hosts
  0.6 J_CHICKENPOX_22        BODY: {2}Letter - punctuation - {2}Letter
  0.6 J_CHICKENPOX_16        BODY: {1}Letter - punctuation - {6}Letter
  2.3 MANGLED_LOW            BODY: mangled low
  0.1 FU_FREE                URI: FU_FREE
  1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL 
blocklist
                             [URIs: innhgh.com]
  3.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                             [URIs: innhgh.com]
  1.6 MISSING_SUBJECT        Missing Subject: header
  2.5 FM_NO_FROM_OR_TO       FM_NO_FROM_OR_TO
  0.5 FM_NO_TO               FM_NO_TO
  3.2 FM_MASKEDW0RDS         FM_MASKEDW0RDS


-- 
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!