Bug 6772 - GMD_PDF_STOX_M3 causing false positives
Summary: GMD_PDF_STOX_M3 causing false positives
Status: RESOLVED INVALID
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 3.3.2
Hardware: PC Windows 7
: P2 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-03-14 11:36 UTC by Niamh Holding
Modified: 2012-03-15 06:53 UTC (History)
1 user (show)


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Niamh Holding 2012-03-14 11:36:22 UTC 
This rule is hitting on PDF invoices from one of our suppliers and as it is quite a high scoring rule this is resulting in the messages being tagged as spam.
Comment 1 AXB 2012-03-14 11:42:19 UTC 
Could it be this is an ancient SARE rule from 2007? and not an SA default rule?

Remember you can change the scores or disable the rule in your local.cf

score           GMD_PDF_STOX_M3         0

-----------
FTR:

# File: pdfinfo.cf
# Version: 0.3
# Created: 2007-06-25
# Modified: 2007-07-11
# Site URL: http://www.rulesemporium.com/plugins.htm#PDFinfo
# Author: Dallas Engelken <dallase@uribl.com>
# Requires: PDFInfo.pm plugin
# License: Private Use Only - Non-Redistributable until public release.
# Description: This plugin/ruleset combination will help you alleviate the new
#              PDF based stock spam which began to appear mid-June, 2007.
#
# Changes:
#
#   0.3 - added rules based on the new pdf_match_details() function
#       - added additional fuzzy md5 rules
#       - disabled static md5 rules as they are no longer hitting.
#   0.2 - added static md5 to hit full page stock spam.
#   0.1 - initial ruleset.
#
Comment 2 Niamh Holding 2012-03-14 12:55:03 UTC 
OK as you say not a Spamassassin rule, it's from pdfinfo.cf by Dallas Engelken

I'll disable it is local.cf

Niamh
Comment 3 AXB 2012-03-15 06:50:07 UTC 
PMC: can we close as not valid?
Comment 4 Niamh Holding 2012-03-15 06:53:48 UTC 
Sure