false positives on rule "FM_RATSIGN_1106" and what to do?
    Chris Yuzik 
    itdept at fractalweb.com
       
    Tue May 29 20:30:48 IST 2007
    
    
  
Hi,
Suddenly, I'm seeing quite a number of false positives on the rule 
"FM_RATSIGN_1106" that gets a whopping 3.8 points. I've tried to figure 
out what exactly it's hitting on, but the only thing I found was:
    ##{ FM_RATSIGN_1106
    meta     FM_RATSIGN_1106    (__MSGID_VGA && __DATE_700)
    describe FM_RATSIGN_1106    Fingerprint seen in lots of spam. 11/2006
    ##} FM_RATSIGN_1106
I think I need to set this rule down to 0.01 for now, or does someone 
have a better suggestion?
Thanks
    
    
More information about the MailScanner
mailing list