You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2009/06/30 12:10:01 UTC

svn commit: r789646 - in /spamassassin/trunk: rules/ t.rules/BOUNCE_MESSAGE/

Author: jm
Date: Tue Jun 30 10:10:00 2009
New Revision: 789646

URL: http://svn.apache.org/viewvc?rev=789646&view=rev
Log:
bug 5942: fix BOUNCE_MESSAGE false positives due to Auto-Submitted: header use in nonbounces

Added:
    spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1
    spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1.cf
    spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2
    spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2.cf
    spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3
    spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3.cf
    spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1
    spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1.cf
Modified:
    spamassassin/trunk/rules/20_vbounce.cf

Modified: spamassassin/trunk/rules/20_vbounce.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_vbounce.cf?rev=789646&r1=789645&r2=789646&view=diff
==============================================================================
--- spamassassin/trunk/rules/20_vbounce.cf (original)
+++ spamassassin/trunk/rules/20_vbounce.cf Tue Jun 30 10:10:00 2009
@@ -68,9 +68,8 @@
 
 header __BOUNCE_RPATH_MD      Return-Path =~ /(?:mailer-(?:daemon|deamon)|quotaagent|pleaseforward|autoresponder|autoresponse-\S+|devnull\S*)\@/i
 
-# __AUTO_GEN_AS can appear in non-bounce mails with __XM_VBULLETIN,
+# can appear in non-bounce mails with __XM_VBULLETIN,
 # or with X-Cron-Env headers, so exclude those cases
-header __AUTO_GEN_AS    Auto-Submitted =~ /auto-(?:generated|replied)/
 header __XM_VBULLETIN   X-Mailer =~ /^vBulletin Mail/
 header __X_CRON_ENV     X-Cron-Env =~ /^</
 
@@ -81,7 +80,7 @@
 header __AUTO_GEN_4     X-Mailer =~ /autoresponder/i
 header __AUTO_GEN_XXSP  X-XSP-Msgclass =~ /NOTIFICATION/
 header __AUTO_GEN_PREC  Precedence =~ /auto/
-meta __BOUNCE_AUTO_GENERATED     ((__AUTO_GEN_AS||__AUTO_GEN_MS||__AUTO_GEN_3||__AUTO_GEN_4||__AUTO_GEN_AG||__AUTO_GEN_XXSP ||__AUTO_GEN_CM||__AUTO_GEN_PREC) && !__XM_VBULLETIN && !__X_CRON_ENV)
+meta __BOUNCE_AUTO_GENERATED     ((__AUTO_GEN_MS||__AUTO_GEN_3||__AUTO_GEN_4||__AUTO_GEN_AG||__AUTO_GEN_XXSP ||__AUTO_GEN_CM||__AUTO_GEN_PREC) && !__XM_VBULLETIN && !__X_CRON_ENV)
 
 header __BOUNCE_Y_AUTOGEN     Subject =~ /^Yahoo! Auto Response/
 header __BOUNCE_SYMANTEC      Subject =~ /^Returned mail.{0,5}(?:Error During Delivery|see transcript for details|)$/i

Added: spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1?rev=789646&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1 (added)
+++ spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1 Tue Jun 30 10:10:00 2009
@@ -0,0 +1,55 @@
+From MAILER-DAEMON  Wed Jul 30 05:46:24 2008
+Return-Path: <>
+X-Spam-Virus: No
+X-Spam-Checker-Version: SpamAssassin 3.3.0-r650054 (2008-04-21) on
+	soman.fdntech.com
+X-Spam-Relays-External: [ ip=81.176.79.62 rdns=smtp.moneypost.ru
+	helo=smtp1.moneypost.ru by=soman.fdntech.com ident= envfrom= intl=0
+	id=46920BA516B auth= msa=0 ]
+X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_05 shortcircuit=no
+	autolearn=ham version=3.3.0-r650054
+X-Spam-Relays-Internal: 
+X-Spam-Relays-Untrusted: [ ip=81.176.79.62 rdns=smtp.moneypost.ru
+	helo=smtp1.moneypost.ru by=soman.fdntech.com ident= envfrom= intl=0
+	id=46920BA516B auth= msa=0 ]
+X-Spam-Relays-Trusted: 
+X-Spam-Level: 
+X-Spam-RBL: 
+X-Original-To: |0.95jm@jmason.org
+Delivered-To: jm@mail.fdntech.com
+Received: from smtp1.moneypost.ru (smtp.moneypost.ru [81.176.79.62])
+	by soman.fdntech.com (Postfix) with ESMTP id 46920BA516B
+	for <|0...@jmason.org>; Wed, 30 Jul 2008 05:46:24 -0500 (CDT)
+Received: from mailnull by smtp1.moneypost.ru with local (Exim 4.54 (FreeBSD))
+	id 1KO9CD-0009mG-Ed
+	for |0.95jm@jmason.org; Wed, 30 Jul 2008 14:46:18 +0400
+Auto-Submitted: auto-generated
+From: Mail Delivery System <Ma...@moneypost.ru>
+To: |0.95jm@jmason.org
+Subject: Warning: message 1KNmHQ-000Md3-Kj delayed 24 hours
+Message-Id: <E1...@smtp1.moneypost.ru>
+Date: Wed, 30 Jul 2008 14:46:17 +0400
+X-SA-Exim-Connect-IP: <locally generated>
+X-SA-Exim-Mail-From: 
+X-SA-Exim-Scanned: No (on smtp1.moneypost.ru); SAEximRunCond expanded to false
+
+This message was created automatically by mail delivery software.
+A message that you sent has not yet been delivered to one or more of its
+recipients after more than 24 hours on the queue on smtp1.moneypost.ru.
+
+The message identifier is:     1KNmHQ-000Md3-Kj
+The subject of the message is: =?koi8-r?B?08TBwNTT0SDPxsnT2SDXINPP19LFzcXOzs/NICDaxMHOyck=?=
+The date of the message is:    Tue, 29 Jul 2008 17:18:08 +0700
+
+The addresses to which the message has not yet been delivered are:
+
+  marketing@moneypost.ru
+    Delay reason: SMTP error from remote mail server after RCPT TO:<ma...@moneypost.ru>:
+    host imap1.moneypost.ru [81.176.79.60]: 452 4.2.2 Over quota
+  wowa@moneypost.ru
+
+No action is required on your part. Delivery attempts will continue for
+some time, and this warning may be repeated at intervals if the message
+remains undelivered. Eventually the mail delivery software will give up,
+and when that happens, the message will be returned to you.
+

Added: spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1.cf?rev=789646&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1.cf (added)
+++ spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-1.cf Tue Jun 30 10:10:00 2009
@@ -0,0 +1,2 @@
+whitelist_bounce_relays soman.fdntech.com
+

Added: spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2?rev=789646&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2 (added)
+++ spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2 Tue Jun 30 10:10:00 2009
@@ -0,0 +1,48 @@
+From MAILER-DAEMON  Thu Jul 10 01:49:15 2008
+Return-Path: <>
+X-Spam-Virus: No
+X-Spam-Checker-Version: SpamAssassin 3.3.0-r650054 (2008-04-21) on
+	soman.fdntech.com
+X-Spam-Relays-External: [ ip=81.177.3.13 rdns= helo=server.lx-host.net
+	by=soman.fdntech.com ident= envfrom= intl=0 id=E014CBA5164 auth= msa=0 ]
+X-Spam-Status: No, score=0.7 required=5.0 tests=BAYES_50,RCVD_IN_SORBS_WEB,
+	RDNS_NONE shortcircuit=no autolearn=no version=3.3.0-r650054
+X-Spam-Relays-Internal: 
+X-Spam-Relays-Untrusted: [ ip=81.177.3.13 rdns= helo=server.lx-host.net
+	by=soman.fdntech.com ident= envfrom= intl=0 id=E014CBA5164 auth= msa=0 ]
+X-Spam-Relays-Trusted: 
+X-Spam-Level: 
+X-Spam-RBL: <dns:13.3.177.81.dnsbl.sorbs.net> [127.0.0.7]
+X-Original-To: |0.95jm@jmason.org
+Delivered-To: jm@mail.fdntech.com
+Received: from server.lx-host.net (unknown [81.177.3.13])
+	by soman.fdntech.com (Postfix) with ESMTP id E014CBA5164
+	for <|0...@jmason.org>; Thu, 10 Jul 2008 01:49:14 -0500 (CDT)
+Received: from mail by server.lx-host.net with local (Exim 4.60)
+	id 1KGpX2-00084P-7v
+	for |0.95jm@jmason.org; Thu, 10 Jul 2008 10:21:32 +0400
+Auto-Submitted: auto-replied
+From: Mail Delivery System <Ma...@server.lx-host.net>
+To: |0.95jm@jmason.org
+Subject: Warning: message 1KFsyl-0000YU-6I delayed 48 hours
+Message-Id: <E1...@server.lx-host.net>
+Date: Thu, 10 Jul 2008 10:21:32 +0400
+
+This message was created automatically by mail delivery software.
+A message that you sent has not yet been delivered to one or more of its
+recipients after more than 48 hours on the queue on server.lx-host.net.
+
+The message identifier is:     1KFsyl-0000YU-6I
+The subject of the message is: =?koi8-r?B?4cLPzsXO1NPLz8Ugz8LTzNXWydfBzsnFIMvPzdDYwNTF0s/X?=
+The date of the message is:    Mon, 7 Jul 2008 13:17:11 -0300
+
+The address to which the message has not yet been delivered is:
+
+  doska@alldo.ru
+    Delay reason: mailbox is full
+
+No action is required on your part. Delivery attempts will continue for
+some time, and this warning may be repeated at intervals if the message
+remains undelivered. Eventually the mail delivery software will give up,
+and when that happens, the message will be returned to you.
+

Added: spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2.cf?rev=789646&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2.cf (added)
+++ spamassassin/trunk/t.rules/BOUNCE_MESSAGE/bug-5942-2.cf Tue Jun 30 10:10:00 2009
@@ -0,0 +1,2 @@
+whitelist_bounce_relays soman.fdntech.com
+

Added: spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3?rev=789646&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3 (added)
+++ spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3 Tue Jun 30 10:10:00 2009
@@ -0,0 +1,97 @@
+Return-Path: <re...@boards.ie>
+X-Original-To: jm@localhost
+Delivered-To: jm@localhost.jmason.org
+Received: from radish.jmason.org (localhost [127.0.0.1])
+	by radish.jmason.org (Postfix) with ESMTP id E19F234134
+	for <jm...@localhost>; Wed, 27 Jun 2007 01:09:30 +0100 (IST)
+X-Spam-Virus: No
+X-Spam-Checker-Version: SpamAssassin 3.3.0-r543787 (2007-06-02) on
+	dogma.boxhost.net
+X-Spam-Relays-External: [ ip=89.234.66.109 rdns=smtp.boards.ie
+	helo=muppet.boards.ie by=dogma.boxhost.net ident= envfrom= intl=0
+	id=A429C310051 auth= msa=0 ] [ ip=89.234.66.99 rdns= helo=89.234.66.109
+	by=muppet.boards.ie ident= envfrom= intl=0 id=07BA5FF43BD auth= msa=0 ]
+X-Spam-Status: No, score=2.0 required=5.0 tests=AWL,BAYES_50,
+	DK_POLICY_SIGNSOME,RCVD_NUMERIC_HELO shortcircuit=no autolearn=no
+	version=3.3.0-r543787
+X-Spam-Relays-Internal: 
+X-Spam-Relays-Untrusted: [ ip=89.234.66.109 rdns=smtp.boards.ie
+	helo=muppet.boards.ie by=dogma.boxhost.net ident= envfrom= intl=0
+	id=A429C310051 auth= msa=0 ] [ ip=89.234.66.99 rdns= helo=89.234.66.109
+	by=muppet.boards.ie ident= envfrom= intl=0 id=07BA5FF43BD auth= msa=0 ]
+X-Spam-Relays-Trusted: 
+X-Spam-Level: **
+X-Spam-RBL: <dns:boards.ie?type=MX> [10 mail1.hosting.digiweb.ie.]
+	<dns:boards.ie> [89.234.66.107]
+X-Original-To: jm-boards@jmason.org
+Delivered-To: jm@dogma.boxhost.net
+Received: from localhost [127.0.0.1]
+	by radish.jmason.org with IMAP (fetchmail-6.3.2)
+	for <jm...@localhost> (single-drop); Wed, 27 Jun 2007 01:09:30 +0100 (IST)
+Received: from muppet.boards.ie (smtp.boards.ie [89.234.66.109])
+	by dogma.boxhost.net (Postfix) with ESMTP id A429C310051
+	for <jm...@jmason.org>; Wed, 27 Jun 2007 01:00:14 +0100 (IST)
+Received: from 89.234.66.109 (unknown [89.234.66.99])
+	by muppet.boards.ie (Postfix) with SMTP id 07BA5FF43BD
+	for <jm...@jmason.org>; Wed, 27 Jun 2007 01:00:32 +0100 (IST)
+Date: Wed, 27 Jun 2007 00:02:56 +0000
+To: jm-boards@jmason.org
+From: "boards.ie" <re...@boards.ie>
+Auto-Submitted: auto-generated
+Message-ID: <20...@www.boards.ie>
+MIME-Version: 1.0
+Content-Type: text/plain; charset="ISO-8859-1"
+Content-Transfer-Encoding: 8bit
+X-Priority: 3
+X-Mailer: vBulletin Mail via PHP
+Subject: "IrelandOffline" update
+Status: O
+X-UID: 260300
+X-Keywords:                                                                                                    
+
+
+Dear jmason,
+
+You are subscribed to the forum IrelandOffline, there have been 2 new threads and 2 updated threads.
+http://www.boards.ie/vbulletin/forumdisplay.php?f=60
+
+The following threads are new:
+************
+Orange Romania launches 3.6 Mbps service
+http://www.boards.ie/vbulletin/showthread.php?t=2055112566
+In forum: IrelandOffline
+Started by: bealtine
+Last post: Yesterday 14:05
+************
+Eircom - no service, only humiliation
+http://www.boards.ie/vbulletin/showthread.php?t=2055112888
+In forum: IrelandOffline
+Started by: tomasAgustafsso
+Last post: Yesterday 21:09
+
+
+The following threads have been updated:
+************
+Eircom service & inrastructure separation and the strike
+http://www.boards.ie/vbulletin/showthread.php?t=2055111045
+In forum: IrelandOffline
+Started by: Dangger
+Last post: Yesterday 16:28
+************
+eircom FWA locations
+http://www.boards.ie/vbulletin/showthread.php?t=2054855438
+In forum: IrelandOffline
+Started by: damien.m
+Last post: Yesterday 22:33
+
+
+All the best,
+boards.ie
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+Unsubscription information:
+
+To unsubscribe from this forum, please visit this page:
+http://www.boards.ie/vbulletin/subscription.php?do=usub&f=60
+
+

Added: spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3.cf?rev=789646&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3.cf (added)
+++ spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug-5942-3.cf Tue Jun 30 10:10:00 2009
@@ -0,0 +1,2 @@
+whitelist_bounce_relays soman.fdntech.com
+

Added: spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1?rev=789646&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1 (added)
+++ spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1 Tue Jun 30 10:10:00 2009
@@ -0,0 +1,46 @@
+X-Envelope-From: <is...@comunic.it>
+X-Envelope-To: <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>,
+  <OM...@regione.piemonte.it>
+Received: from srv-asgw03.csi.it ([127.0.0.1])
+  by localhost (srv-asgw03.csi.it [127.0.0.1]) (amavisd-new, port 10024)
+  with ESMTP id Evx5G8KQCnRW; Wed, 16 Jul 2008 18:44:38 +0200 (CEST)
+Received: from ermes.comunic.it (unknown [213.209.215.152])
+  by srv-asgw03.csi.it (Postfix) with ESMTP id 7B7BC584029;
+  Wed, 16 Jul 2008 18:44:37 +0200 (CEST)
+Received: from 172.16.16.201 (macj.comunic.it [172.16.16.201])
+  by ermes.comunic.it (8.13.6/8.13.6) with ESMTP id m6GD2gko034545;
+  Wed, 16 Jul 2008 15:02:43 +0200 (CEST)
+  (envelope-from iscrizioni@comunic.it)
+Sender: iscrizioni@comunic.it
+Errors-To: iscrizioni@comunic.it
+Reply-To: iscrizioni@comunic.it
+Message-ID: <99...@ermes.comunic.it>
+Mime-Version: 1.0
+Content-Type: text/plain
+From: Parchi-News <pa...@comunic.it>
+Date: Wed, 16 Jul 2008 15:04:31 +0200
+Auto-Submitted: auto-generated
+Precedence: Bulk
+X-Listserver: Macjordomo 1.6a2 - Macintosh Listserver
+To: Multiple recipients of Parchi-News - Sent by <is...@comunic.it>
+Subject: [Parchi News] - Number 1884
+
+[Parchi News] 16 luglio 2008 Issue 1884
+
+Today's Topics:
+[...]
+
+This is not a bounce message. Maybe you can fix __AUTO_GEN_AS.
+Thank you very much
+Regards
+Marco
+

Added: spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1.cf?rev=789646&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1.cf (added)
+++ spamassassin/trunk/t.rules/BOUNCE_MESSAGE/fp-bug5942-1.cf Tue Jun 30 10:10:00 2009
@@ -0,0 +1,2 @@
+whitelist_bounce_relays soman.fdntech.com
+