Package: spamassassin
Version: 3.0.3-1
Severity: normal

The mail at the end of this mail is not forged, it is an actual mail
that I received from a friend.  Yet, it is uncorrectly tagged as
FORGED_YAHOO_RCVD. 

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.30-pre2-pr-hrt-1kHz-1
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set 
to C)

Versions of packages spamassassin depends on:
ii  debconf                       1.4.30.13  Debian configuration management sy
ii  libdigest-sha1-perl           2.10-1     NIST SHA-1 message digest algorith
ii  libhtml-parser-perl           3.45-2     A collection of modules that parse
ii  perl [libstorable-perl]       5.8.4-8    Larry Wall's Practical Extraction 
ii  spamc                         3.0.3-1    Client for SpamAssassin spam filte

-- debconf information:
* spamassassin/upgrade/2.40:
  spamassassin/upgrade/2.40w:
  spamassassin/upgrade/cancel: Continue
* spamassassin/upgrade/2.42: No
  spamassassin/upgrade/2.42m: No
  spamassassin/upgrade/2.42u: No

================
>From [EMAIL PROTECTED] Fri May 27 10:07:57 2005
Received: from localhost ([127.0.0.1] ident=pot)
        by pot.isti.cnr.it with esmtp (Exim 3.36 #1 (Debian))
        id 1DbZsq-000205-00
        for <[EMAIL PROTECTED]>; Fri, 27 May 2005 10:07:56 +0200
Received: from pop.isti.cnr.it [194.119.192.4]
        by localhost with POP3 (fetchmail-6.2.5 polling pop.isti.cnr.it account 
pot)
        for [EMAIL PROTECTED] (single-drop); Fri, 27 May 2005 10:07:56 +0200 
(CEST)
Received: from PMAS-DAEMON.mx.isti.cnr.it by mx.isti.cnr.it
 (PMDF V6.2-1 #31069) id <[EMAIL PROTECTED]> for
 [EMAIL PROTECTED] (ORCPT [EMAIL PROTECTED]); Fri,
 27 May 2005 10:07:46 +0200
Received: from conversionlocal.isti.cnr.it by mx.isti.cnr.it
 (PMDF V6.2-1 #31069) id <[EMAIL PROTECTED]> for
 [EMAIL PROTECTED] (ORCPT [EMAIL PROTECTED]); Fri,
 27 May 2005 10:07:45 +0200
Received: from smtp.register.it (vivaldi04.register.it [195.110.100.133])
 by mx.isti.cnr.it (PMDF V6.2-1 #31069)
 with SMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]
 (ORCPT [EMAIL PROTECTED]); Fri, 27 May 2005 10:07:44 +0200
Received: (qmail 21289 invoked by alias); Fri, 27 May 2005 08:07:42 +0000
Received: (qmail 21214 invoked from network); Fri, 27 May 2005 08:07:42 +0000
Received: from unknown (HELO web32909.mail.mud.yahoo.com) (68.142.206.56)
 by smtp.register.it with SMTP; Fri, 27 May 2005 08:07:42 +0000
Received: (qmail 2441 invoked by uid 60001); Fri, 27 May 2005 08:07:42 +0000
Received: from [151.8.182.131] by web32909.mail.mud.yahoo.com via HTTP; Fri,
 27 May 2005 09:07:42 +0100 (BST)
Date: Fri, 27 May 2005 09:07:42 +0100 (BST)
From: Andreana Caruso <[EMAIL PROTECTED]>
Subject: Re: Marina Romea
In-reply-to: <[EMAIL PROTECTED]>
To: Francesco Potorti` <[EMAIL PROTECTED]>
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 8BIT
Delivered-to: [EMAIL PROTECTED]
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
 
b=F9KHNUWOvSkMDPXgODV+nGLgSa3yq4ZNochFBR6bhpQKZL4JMEJYwwoOBrnse39qTEMOm9QloLsuL8Hw7wvVkeLwDmjYnKAZQWoKrYOJ70niZPuGOW1Vc7IoxlGXfftjHpW2AWouVo+lRQ29RpdOzBaLplDc6HGqy6007vEO1KE=
  ;
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on pot.isti.cnr.it
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_00,DNS_FROM_RFC_POST,
        FORGED_YAHOO_RCVD autolearn=no version=3.0.3

[MAIL BODY DELETED]     
                
___________________________________________________________ 
Yahoo! Messenger - NEW crystal clear PC to PC calling worldwide with voicemail 
http://uk.messenger.yahoo.com

Spam detection software, running on the system "pot.isti.cnr.it", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Ok, allora sara' per la prossima volta. --- Francesco 
  Potorti` <[EMAIL PROTECTED]> wrote: > La saggia picia mi fa notare che se 
  Anita deve fare > un saggio di piano, > nei due giorni prima sarà bene 
  che si eserciti... > [...] 

Content analysis details:   (1.7 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.7 FORGED_YAHOO_RCVD      'From' yahoo.com does not match 'Received' headers
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0000]
 1.6 DNS_FROM_RFC_POST      RBL: Envelope sender in postmaster.rfc-ignorant.org



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to