jdow wrote:
Is there a test for "out of order" headers involved? It looks like
Excite is placing a Received header under some of the other headers
where it does not typically belong.
{^_^}
It only hit on these three rules: Content analysis details: (7.10 points, 5 required) RCVD_FAKE_HELO_DOTCOM (3.6 points) Received contains a faked HELO hostname SARE_FREE_WEBM_Excite (0.7 points) Sender used free email account - may be spammer RCVD_FAKE_HELO_DOTCOM_2 (2.8 points) Received contains a faked HELO hostname (2)
In an offlist message it was confirmed that 3.0 fixed the misfire on the _DOTCOM_2 rule but the RCVD_FAKE_HELO_DOTCOM was still misfiring. Bugzilla ticket #3558 is open for this FP.
thanks to all, Scott
--
Scott V. Blomquist,A-SA-CN-NRK TINLC(tm) #2598
ITI/Bear&Co Rochester, VT
802-767-3174(v) 802-767-3726(f)
"Any technology sufficiently advanced is indistinguishable from Magic."
A. C. Clarke