[Rspamd-Users] rule CTYPE_MISSING_DISPOSITION false positive

[Bernardo Reino]

On Mon, 25 Nov 2019, Emanuel Gonzalez wrote:

> I have found a false positive, the highest score is given by the symbol:
> CTYPE_MISSING_DISPOSITION
>
> Content-Type: application/octet-stream; name="pdfs/FA0006-00055144.pdf"
> Content-Transfer-Encoding: base64
>
> What is the reason for this? Thank you

The "Content-Disposition" header is missing.
Read RFC2183.

You can always lower the score (if you cannot correct the behavior of the 
sender).