http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4727

           Summary: FORGED_MUA_OUTLOOK falsely flags legit mail through
                    yahoo
           Product: Spamassassin
           Version: 3.1.0
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


The following legit message was flagged with FORGED_MUA_OUTLOOK. Apparently
yahoo is now allowing Outlook users to send mail through them but the
circumvention tests used for the similar behavior through hotmail are not valid
in this case.

>From - Thu Dec 08 19:21:55 2005
X-Account-Key: account3
X-UIDL: 2:3"!)^0"!hG;"!PLi!!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on mail.dhs-club.com
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.4 required=5.0 tests=BAYES_50,FORGED_MUA_OUTLOOK,
        MSGID_FROM_MTA_HEADER,MSGID_FROM_MTA_ID autolearn=no version=3.1.0
X-Spam-Report: 
        *  1.4 MSGID_FROM_MTA_ID Message-Id for external message added locally
        *  0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
        *      [score: 0.4877]
        *  0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
        *  4.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Received: from smtp111.sbc.mail.mud.yahoo.com (smtp111.sbc.mail.mud.yahoo.com
[68.142.198.210])
        by mail.dhs-club.com (8.12.11/8.12.11) with SMTP id jB909uMx011150
        for <[EMAIL PROTECTED]>; Thu, 8 Dec 2005 19:10:00 -0500
Message-Id: <[EMAIL PROTECTED]>
Received: (qmail 67761 invoked from network); 9 Dec 2005 00:09:56 -0000
Received: from unknown (HELO solutionsoft) ([EMAIL PROTECTED] with login)
  by smtp111.sbc.mail.mud.yahoo.com with SMTP; 9 Dec 2005 00:09:55 -0000
Reply-To: "Solutionsoft" <[EMAIL PROTECTED]>
From: "Solutionsoft" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: SPAM? Perl Builder 2.0 at a DRAMATIC Savings through December 10
Date: Thu, 8 Dec 2005 16:12:47 -0800
MIME-Version: 1.0
Content-Type: text/plain;
        charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Spam-Prev-Subject: Perl Builder 2.0 at a DRAMATIC Savings through December 10
X-UIDL: 2:3"!)^0"!hG;"!PLi!!


Dear Perl Developer:

Thank you for taking the time to download the Perl Builder trial software.

We have just released version 2.0k, a maintenance update.  We would like to make
you aware of a very special opportunity to purchase Perl Builder at most
attractive price we have ever offered:

<snip>

This email has been sent because you previously downloaded an evaluation copy of
Perl Builder.

Solutionsoft 370 Altair Way, Ste 200
Sunnyvale CA 94086

To unsubscribe from all future emails, please goto the following URL:
http://www.solutionsoft.com/unsubscribe.htm



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to