http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5666





------- Additional Comments From [EMAIL PROTECTED]  2008-01-11 03:03 -------
(in reply to comment #20)

One of those is spam and the other a widely distributed phishing attempt. This
is making me have second thoughts about the reasoning I expressed in comment
#15. The problem is that there are two ways that you can end up with
MSGID_FROM_MTA_HEADER. One is like some of the sympatico.ca mails where the MTA
substitutes its own Message-ID in every mail sent through it. This does not
indicate a forged Outlook Express mail even if the Message-Id format is not one
generated by Outlook Express. The other way it can happen is when the mail is
forging being sent by OE, but does not generate any Message-Id so that the MTA
has to. That case does indicate a forged MUA of Outlook Express.

The statistics on either of those two situations are just too sparse for me to
know which is more likely.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to