false positives on rule "FM_RATSIGN_1106" and what to do?
Chris Yuzik
itdept at fractalweb.com
Tue May 29 20:30:48 IST 2007
Hi,
Suddenly, I'm seeing quite a number of false positives on the rule
"FM_RATSIGN_1106" that gets a whopping 3.8 points. I've tried to figure
out what exactly it's hitting on, but the only thing I found was:
##{ FM_RATSIGN_1106
meta FM_RATSIGN_1106 (__MSGID_VGA && __DATE_700)
describe FM_RATSIGN_1106 Fingerprint seen in lots of spam. 11/2006
##} FM_RATSIGN_1106
I think I need to set this rule down to 0.01 for now, or does someone
have a better suggestion?
Thanks
More information about the MailScanner
mailing list