This is the rule check for a 'normal' (non-spam) e-mail become from Hotmail:
pts rule name description
--
--
1.0 SUBJ_ALL_CAPS Subject is all capitals
2.3 FORGED_HOTMAIL_RCVDForged hotmail.com
we would need to see the full headers.
Regards,
--
--[ UxBoD ]--
// PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749 SIP Phone: [EMAIL
'hotmail' isn't listed in DCC.
DCC only scored on fuzy checksums on the body and portions of the headers.
Also, DCC is NOT a 100% 'spam score'. DCC is a 'bulk email' score.
Even well run technical mailing list emails are SUPPOSED to score high with
DCC. (its 'bulk'). Read The DCC documents on
Here is...
===
Received: from bay0-omc2-s37.bay0.hotmail.com (65.54.246.173)
by myserver.mydomain with SMTP; 24 Feb 2008 20:34:41 -0300
Received-SPF: pass (myserver.mydomain: SPF record at spf-a.hotmail.com
designates 65.54.246.173 as permitted sender)
Received: from
Sorry,
The original subject was "TESTE_CAXIAS" (in portuguese language and all
capitals)
Rejaine Monteiro escreveu:
Here is...
===
Received: from bay0-omc2-s37.bay0.hotmail.com (65.54.246.173)
by myserver.mydomain with SMTP; 24 Feb 2008 20:34:41 -0300
Michael Scheidell escreveu:
'However, interestingly enough, you have FORGED_HOTMAIL_RCVD. Did someone
send an email from non hotmail source using a hotmail email address?
No, the message was send from hotmail site (www.hotmail.com)
And, interestingly enough, SCREAMED AT YOU IN THE
Rejaine Monteiro wrote:
But, I not agree with the 2.3 FORGED_HOTMAIL_RCVD score, because
the message come from Hotmail...
to to bugzilla for spamassassin. fill out a report for
forged_hotmail_rcvd (posting to SA list won't help any)
If you are NOT running SA 3.2.4, upgrade. if you are
Michael Scheidell escreveu:
hotmail changes their servers like boy george changes eye liner.
unless you keep up with them, you will get FP's
If you can't upgrade, set score to 0.
I'm running spamassassin 3.1.7 and use sa-update, but upgrade is not
possible for now ...
So, I will score
