<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
I'm running MS v 4.56.6 and just noticed a strange error today. I have
MCP setup to catch a few derogotary terms. More for testing purposes
then actually use. It rarely gets any hits. But today it is
consistently hitting one person. The funny thing it is matching on
rules in the spam rules and not the MCP rules. The last message had the
following from MailWatch for Spam:<br>
<br>
<br>
<table class="sa_rules_report" border="0" cellpadding="1"
cellspacing="2" width="100%">
<tbody>
<tr>
<td>cached</td>
<td>not</td>
<td> </td>
</tr>
<tr>
<td><br>
</td>
<td>score=0.22</td>
<td> </td>
</tr>
<tr>
<td>5.6</td>
<td>required</td>
<td> </td>
</tr>
<tr>
<td align="left">-2.60</td>
<td width="200">BAYES_00</td>
<td>Bayesian spam probability is 0 to 1%</td>
</tr>
<tr>
<td>1.10</td>
<td>FM_MULTI_ODD2</td>
<td> </td>
</tr>
<tr>
<td align="left">0.00</td>
<td width="200">FORGED_OUTLOOK_HTML</td>
<td>Outlook can't send HTML message only</td>
</tr>
<tr>
<td align="left">0.00</td>
<td width="200">FORGED_OUTLOOK_TAGS</td>
<td>Outlook can't send HTML in this format</td>
</tr>
<tr>
<td align="left">0.50</td>
<td width="200">HTML_40_50</td>
<td>Message is 40% to 50% HTML</td>
</tr>
<tr>
<td align="left">0.00</td>
<td width="200">HTML_MESSAGE</td>
<td>HTML included in message</td>
</tr>
<tr>
<td align="left">0.22</td>
<td width="200">MIME_BASE64_NO_NAME</td>
<td>base64 attachment does not have a file name</td>
</tr>
<tr>
<td align="left">0.00</td>
<td width="200">MIME_HTML_ONLY</td>
<td>Message only has text/html MIME parts</td>
</tr>
<tr>
<td align="left">1.00</td>
<td width="200">SUBJ_ALL_CAPS</td>
<td>Subject is all capitals</td>
</tr>
</tbody>
</table>
<br>
In the MCP section:<br>
<br>
<table class="maildetail" border="0" cellpadding="1" cellspacing="1"
width="100%">
<tbody>
<tr>
<td class="heading" align="right" valign="top" width="175">MCP
Score:</td>
<td class="detail">4.61</td>
</tr>
<tr>
<td class="heading" align="right" valign="top" width="175">MCP
Report:</td>
<td class="detail">
<table class="sa_rules_report" border="0" cellpadding="1"
cellspacing="2" width="100%">
<thead><th>Score</th>
<th>Matching Rule</th>
<th>Description</th>
</thead><tbody>
<tr>
<td><br>
</td>
<td>ALL_TRUSTED</td>
<td> </td>
</tr>
<tr>
<td><br>
</td>
<td>FORGED_OUTLOOK_HTML</td>
<td> </td>
</tr>
<tr>
<td><br>
</td>
<td>FORGED_OUTLOOK_TAGS</td>
<td> </td>
</tr>
<tr>
<td><br>
</td>
<td>HTML_MESSAGE</td>
<td> </td>
</tr>
<tr>
<td><br>
</td>
<td>MIME_HTML_ONLY</td>
<td> </td>
</tr>
<tr>
<td><br>
</td>
<td>SUBJ_ALL_CAPS</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<br>
<br>
<br>
I'm confused how the MCP section is suddenly matching my SA rules
instead of the ones I created for MCP?<br>
</body>
</html>