SA Bugzilla – Bug 6391
Gecko Build in Thunderbird Changed
Last modified: 2010-04-01 12:26:11 UTC
The latest version of Thunderbird has Gecko Build which triggers SA rule. The latest Gecko build which Thunderbird reports is: User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.8) Gecko/20100227 Lightning/1.0b1 Thunderbird/3.0.3
Which rule? If you're referring to RATWARE_GECKO_BUILD, this is a solved issue, see bug 6305 and bug 6323. You probably don't have sa-update properly configured, as the rule has been either zeroed (SA 3.2.5, SA 3.3.0) or removed entirely (SA 3.3.1+, SA trunk), both of which solve the problem.
Assuming this actually is about RATWARE_GECKO_BUILD, which has been disabled (score zero'ed out) in 3.2 and 3.3. Duplicate of bug 6323. If you are referring to a different rule, please feel free to re-open this bug report, giving the necessary information. At the very least the actual rule hit, and best some sample headers, too. Same, if you are about that rule and still see it hitting *after* sa-update'ing your stock rules. *** This bug has been marked as a duplicate of bug 6323 ***