https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5902





--- Comment #9 from Alain Kelder <[EMAIL PROTECTED]>  2008-06-09 13:13:43 PST 
---
Searched through my caught spam and found another message which had the
HABEAS_ACCREDITED_SOI SpamAssassin rule in the header. This one was was an
unsolicited invite from Flixter sent to my regular email address and the
"From", "Return-Path" and "Sender" all contained a valid Yahoo user whom I know
(and who said he didn't send it to me nor uses flixter.com).

Since the only messages I have received so far with the HABEAS_ACCREDITED_SOI
SA rule header are spam, presence of this header is a good indication that
message is spam. If I keep getting these, I'll either modify the SA rule or add
a Sieve rule to sort this Habeas accredited garbage into the folder it belongs
in (trash).

SpamAssassin rocks and any anyone involved in the project is super awesome as
far as I'm concerned, but this "reputation management service" Habeas seems
suspect.

----------- spam message headers ---------------

Return-Path: [REAL.YAHOO.USER]
Received: from [REMOVED] ([unix socket])
         by mail (Cyrus v2.2.12) with LMTPA;
         Thu, 19 Apr 2007 12:26:16 -0700
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
        by [REMOVED] (Postfix) with ESMTP id C22832D9BF
        for [REMOVED]; Thu, 19 Apr 2007 12:26:16 -0700 (PDT)
Received: from [REMOVED] ([127.0.0.1])
 by localhost ([REMOVED] [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 02267-04 for [REMOVED];
 Thu, 19 Apr 2007 12:26:15 -0700 (PDT)
Received: from mail3.flixster.com (mail3.flixster.com [209.237.233.43])
        by [REMOVED] (Postfix) with ESMTP id D69B72D9BC
        for [REMOVED]; Thu, 19 Apr 2007 12:26:15 -0700 (PDT)
Received: from job06.flixster.com (job06.flixster.com [10.0.2.46])
        by mail3.flixster.com (Postfix) with ESMTP id D3D3A1CC9BA
        for [REMOVED]; Thu, 19 Apr 2007 12:26:17 -0700 (PDT)
Received: from [204.114.53.254] by www.flixster.com with HTTP;
        for [REMOVED]; 19 Apr 2007 12:25:43 PDT
Message-ID: <[EMAIL PROTECTED]>
From: [REAL.YAHOO.USER]
Reply-To: [EMAIL PROTECTED]
Sender: [REAL.YAHOO.USER]
To: [REMOVED]
Subject: ***SPAM*** andrei has sent you a private message
MIME-Version: 1.0
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
Date: Thu, 19 Apr 2007 12:26:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at [REMOVED]
X-Spam-Status: Yes, score=5.067 tagged_above=-9999 required=4
 tests=[DCC_CHECK=4, DNS_FROM_RFC_ABUSE=0.479, DNS_FROM_RFC_POST=1.44,
 DNS_FROM_RFC_WHOIS=0.879, FORGED_YAHOO_RCVD=0.928,
 HABEAS_ACCREDITED_SOI=-4.3, HTML_IMAGE_ONLY_12=1.639, HTML_MESSAGE=0.001,
 MIME_HTML_ONLY=0.001]
X-Spam-Score: 5.067
X-Spam-Level: *****
X-Spam-Flag: YES

-------------- end spam message headers -------------


-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to