https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6678
Ned Slider <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #2 from Ned Slider <[email protected]> 2011-10-19 21:46:05 UTC --- These certainly look like *real* replies, as in it's a conversation where one user has replied to another. Subjects all begin with Re: They all have no In-Reply-To header and no References header, and all appear to be from MSOE6 MUA. Yet I have other examples of replies from the same user with the same X-Mailer relayed through the same ISP that do have the References header. BTW - the FP hits are not just with a single user - I have examples from a couple different users relaying through different ISPs. Here's redacted headers from one example: >From - Fri Jan 14 10:35:29 2011 X-Account-Key: account13 X-UIDL: 00027563483efc4b X-Mozilla-Status: 0011 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: Return-Path: <redacted@redacted> X-Original-To: [email protected] Delivered-To: [email protected] Received: from localhost (Quad [127.0.0.1]) by quad.pendre.co.uk (Postfix) with ESMTP id 7EDC22F42D5 for <[email protected]>; Fri, 14 Jan 2011 09:41:45 +0000 (GMT) X-Virus-Scanned: amavisd-new at pendre.co.uk X-Spam-Flag: NO X-Spam-Score: -3.523 X-Spam-Level: X-Spam-Status: No, score=-3.523 tagged_above=-999 required=5 tests=[BAYES_00=-5, FAKE_REPLY_C=1.486, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01] autolearn=disabled Received: from quad.pendre.co.uk ([127.0.0.1]) by localhost (quad.pendre.co.uk [127.0.0.1]) (amavisd-new, port 10024) with LMTP id qkhobyogXUNG; Fri, 14 Jan 2011 09:41:43 +0000 (GMT) Received: from mail.btconnect.com (c2bthomr13.btconnect.com [213.123.20.131]) by quad.pendre.co.uk (Postfix) with ESMTP id CECBC2F42D4 for <redacted@redacted>; Fri, 14 Jan 2011 09:41:42 +0000 (GMT) Received: from host81-158-xxx-xxx.range81-158.btcentralplus.com (EHLO Chris) ([81.158.xxx.xxx]) by c2bthomr13.btconnect.com with ESMTP id BHY37705; Fri, 14 Jan 2011 09:40:29 +0000 (GMT) Received: from 127.0.0.1 (AVG SMTP 9.0.872 [271.1.1/3378]); Fri, 14 Jan 2011 09:37:41 +0000 Message-ID: <redacted@Chris> From: "Chris" <redacted@redacted> To: "redacted" <redacted@redacted> Subject: Re: redacted Date: Fri, 14 Jan 2011 09:37:41 -0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0046_01CBB3CE.B0481520" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5994 X-Mirapoint-IP-Reputation: reputation=Neutral-1, source=Queried, refid=tid=0001.0A0B0302.4D301A0C.0172, actions=tag X-Junkmail-Status: score=10/50, host=c2bthomr13.btconnect.com X-Junkmail-Signature-Raw: score=unknown, refid=str=0001.0A0B0208.4D301A55.0274,ss=1,fgs=0, ip=0.0.0.0, so=2010-07-22 22:03:31, dmn=2009-09-10 00:05:08, mode=single engine X-Junkmail-IWF: false This is a multi-part message in MIME format. -- Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug.
