Bug 5803 - DNS_FROM_OPENWHOIS score too high, leading to FP
Summary: DNS_FROM_OPENWHOIS score too high, leading to FP
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 3.2.4
Hardware: All other
: P5 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
Depends on:
Reported: 2008-01-31 12:16 UTC by Kelsey Cummings
Modified: 2010-08-11 11:30 UTC (History)
0 users

Attachment Type Modified Status Actions Submitter/CLA Status

Note You need to log in before you can comment on or make changes to this bug.
Description Kelsey Cummings 2008-01-31 12:16:00 UTC
For example, PG&E e-billing notices are getting flagged as SPAM by a 'default'
install of SA with DCC checks enabled.

The score of 2.4 seems too high given the widespread use of private registration

Content analysis details:   (5.5 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.4 DNS_FROM_OPENWHOIS     RBL: Envelope sender listed in bl.open-whois.org.
 0.0 WHOIS_NETSOLPR         URL registered as a NetSol Private Registration
                            [URIs: pge.com]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.7 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.4 DCC_CHECK              Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
Comment 1 Karsten Bräckelmann 2010-08-11 11:30:30 UTC
Closing, obsolete -- by now this bug is FIXED of sorts. ;)

DNS_FROM_OPENWHOIS has been removed entirely a year ago, since open-whois.org has been cybersquatted. See bug 6157.