[Bug 3235] New: False Positives on FORGED_DEF_WHITELIST

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=3235

           Summary: False Positives on FORGED_DEF_WHITELIST
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: major
          Priority: P2
         Component: Rules
        AssignedTo: spamassassin-dev@incubator.apache.org
        ReportedBy: marc@perkel.com


Here's the headers. In this case the person receiving it forks another copy of
the message to a second address and the second address is spam scanned.

Return-path: <pa...@paypal.com>
Envelope-to: donovan@marxmail.net
Delivery-date: Sun, 28 Mar 2004 12:35:11 -0800
Received: from root by darwin.ctyme.com with ctyme-spam-scanned (Exim 4.30)
     id 1B7gzs-00038I-Px
     for donovan@marxmail.net; Sun, 28 Mar 2004 12:35:11 -0800
Received: from ns1.daguru.net ([65.19.133.2] helo=nsx.daguru.net)
     by darwin.ctyme.com with smtp (Exim 4.30)
     id 1B7gzs-00038D-Iw
     for donovan@marxmail.net; Sun, 28 Mar 2004 12:35:08 -0800
Received: (qmail 14801 invoked by uid 110); 28 Mar 2004 20:34:51 -0000
Delivered-To: 127-donovan@webappguru.net
Received: (qmail 14797 invoked from network); 28 Mar 2004 20:34:51 -0000
Received: from smtp-outbound.nix.paypal.com (64.4.240.67)
     by ns1.daguru.net with SMTP; 28 Mar 2004 20:34:51 -0000
Received: from web13.sc5.paypal.com (web77.nix.paypal.com [10.192.2.77])
     by smtp-outbound.nix.paypal.com (Postfix) with SMTP id A281435D7E0
     for <do...@webappguru.net>; Sun, 28 Mar 2004 12:34:37 -0800 (PST)
Received: (qmail 21022 invoked by uid 99); 28 Mar 2004 20:34:37 -0000
Date: Sun, 28 Mar 2004 12:34:37 -0800
Message-Id: <10...@paypal.com>
From: service@paypal.com
To: donovan@webappguru.net
Subject: Receipt for your Payment
X-Sender-Hostname: ns1.daguru.net
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.0-r9592 (2004-03-18) on
     darwin.ctyme.com
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.1 required=5.0 tests=BAYES_00,
     FORGED_DEF_WHITELIST,NO_REAL_NAME autolearn=no version=3.0.0-r9592
X-Spam-Report:
     * 0.1 NO_REAL_NAME From: does not include a real name
     * 10 FORGED_DEF_WHITELIST Forged From: is in default white-list
     * -5.0 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
     * [score: 0.0000]
X-Spam: [SPAM] - LOW



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.