https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6417

--- Comment #17 from Michael Scheidell <[email protected]> 2010-07-11 
08:41:24 EDT ---
then again, just because its dkim signed, doesn't mean its legit.
just because its spf_pass doesn't mean its legit :-)

forged ms email, spam attached, '®Microsoft Notification.rtf' sent through
yahoo (who signed it)

dkim passed.

Received: from web83806.mail.sp1.yahoo.com (web83806.mail.sp1.yahoo.com
[69.147.85.75])
    by mx1.secnap.com.ionspam.net (Postfix) with SMTP id BC0032B7C5D
    for <[email protected]>; Sat, 10 Jul 2010 16:48:00 -0400 (EDT)
Received: (qmail 71677 invoked by uid 60001); 10 Jul 2010 20:47:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btinternet.com;
s=s1024; t=1278794879;


From: =?iso-8859-1?Q?Microsoft=A9_Corporation?= <[email protected]>
Reply-To: =?iso-8859-1?Q?Microsoft=A9_Corporation?= <[email protected]>
Subject: [SPAM]***Your Payment {donwload attached file}***


Content-Type: application/rtf;
name="=?utf-8?B?wq5NaWNyb3NvZnQgTm90aWZpY2F0aW9uLnJ0Zg==?="
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="=?utf-8?B?wq5NaWNyb3NvZnQgTm90aWZpY2F0aW9uLnJ0Zg==?="

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to