Bug 7832 - Rule HK_SCAM is triggered by standard business email
Summary: Rule HK_SCAM is triggered by standard business email
Status: RESOLVED INVALID
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: unspecified
Hardware: All All
: P2 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-07-01 19:15 UTC by Aner Perez
Modified: 2020-07-01 19:22 UTC (History)
1 user (show)


Attachment Type Modified Status Actions Submitter/CLA Status
Email triggering HK_SCAM rule message/rfc822 None Aner Perez [NoCLA]
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Aner Perez 2020-07-01 19:15:47 UTC 
Created attachment 5706 [details]
Email triggering HK_SCAM rule

The attached email is an example which triggers the HK_SCAM rule.  Looks like __HK_SCAM_S7 is the culprit here since it matches the words "business" and "enterprise" when they are found one after the other (even on different lines).

In the real world this was triggered by a business email that had the following in the signature:

FirstName LastName
Altice Business
Enterprise Account Executive
Comment 1 John Hardin 2020-07-01 19:22:07 UTC 
Please report rule FPs on the SA Users mailing list.