false positives on rule "FM_RATSIGN_1106" and what to do?

Chris Yuzik itdept at fractalweb.com
Tue May 29 20:30:48 IST 2007


Hi,

Suddenly, I'm seeing quite a number of false positives on the rule 
"FM_RATSIGN_1106" that gets a whopping 3.8 points. I've tried to figure 
out what exactly it's hitting on, but the only thing I found was:

    ##{ FM_RATSIGN_1106
    meta     FM_RATSIGN_1106    (__MSGID_VGA && __DATE_700)
    describe FM_RATSIGN_1106    Fingerprint seen in lots of spam. 11/2006
    ##} FM_RATSIGN_1106

I think I need to set this rule down to 0.01 for now, or does someone 
have a better suggestion?

Thanks



More information about the MailScanner mailing list