Spamnix FORGED_MUA_IMS

[Tim Philip <ti...@hotmail.com>]

Hi,

I know this is a Spamnix question more than a Spamassassin question but on
the off chance someone here knows the answer (and of course Spamnix is
based on spamassassin..., PS I sent a message to spamnix support but got
an auto responder saying I need to send my registration code to get my mail
read - I don't use Spamnix so thats not much help).

One of my users communicates with Harvard business school and they use
Spamnix on their desktops. His mail is being flagged as spam by Spamnix
and the rule that is causing the problem is:-

FORGED_MUA_IMS     (4.3 points)

But it ain't forged, its Exchange 5.5 SP4 and here is a header:-

Received: (qmail 28127 invoked from network); 19 Aug 2004 02:24:46 -0000
Received: from unknown (HELO sg04xchng.munged.com) (192.168.10.15)
  by unknown with SMTP; 19 Aug 2004 02:24:46 -0000
Received: by sg04xchng.munged.com with Internet Mail Service (5.5.2653.19)
        id <RGGDN0MV>; Thu, 19 Aug 2004 10:24:46 +0800
Message-ID: <8D...@sg04xchng.munged.com>
From:
To:
Subject:
Date: Thu, 19 Aug 2004 10:24:45 +0800
Importance: high
X-Priority: 1
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: multipart/mixed;
        boundary="----_=_NextPart_000_01C48593.B15D6070"

Spamnix also triggers this rule:-

INVALID_MSGID (0.3 points) Message-Id is not valid, according to RFC 2822

Spamassassin 2.64 doesn't trigger either of these rules. Does anyone know
if Spamnix is using an old broken version of spamassassin or any other 
reason
why these rules should trigger on this mail?

Thanks a lot.

_________________________________________________________________
Feeling spent? Apply here for emergency plastic surgery:   
http://ad.doubleclick.net/clk;9577691;9687279;r?http://www.promo.com.au/virgincreditcard/plasticsurgery/track.cfm?source=P08

Re: Spamnix FORGED_MUA_IMS

[Daniel Quinlan <qu...@pathname.com>]

"Tim Philip" <ti...@hotmail.com> writes:

> I know this is a Spamnix question more than a Spamassassin question but

I'm sorry, I think the best option is to call Spamnix.

I don't want to be harsh, but answering questions about unknown products
is a huge time sink (for many reasons) and I'd be surprised if any open
source project is eager to answer questions about closed products.  I
have nothing against commercial versions of SpamAssassin (after all, I
helped create one in a previous job), but it's not practical.

Daniel

-- 
Daniel Quinlan
http://www.pathname.com/~quinlan/