You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2008/12/29 13:44:36 UTC

svn commit: r729888 - in /spamassassin/trunk: rules/20_ratware.cf t.rules/FORGED_MUA_OUTLOOK/fp-5946-1 t.rules/FORGED_MUA_OUTLOOK/fp-5962-1

Author: jm
Date: Mon Dec 29 04:44:36 2008
New Revision: 729888

URL: http://svn.apache.org/viewvc?rev=729888&view=rev
Log:
bug 5496, bug 5962: fix FORGED_MUA_OUTLOOK false positives, using rule suggestion derived from Roger So and Yusuf Goolamabbas. also add test cases

Added:
    spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5946-1
    spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5962-1
Modified:
    spamassassin/trunk/rules/20_ratware.cf

Modified: spamassassin/trunk/rules/20_ratware.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rules/20_ratware.cf?rev=729888&r1=729887&r2=729888&view=diff
==============================================================================
--- spamassassin/trunk/rules/20_ratware.cf (original)
+++ spamassassin/trunk/rules/20_ratware.cf Mon Dec 29 04:44:36 2008
@@ -47,7 +47,7 @@
 
 # first define situations where servers rewrite message id so we can't use message id to detect forgeries
 
-header __HOTMAIL_BAYDAV_MSGID		MESSAGEID =~ /^<BAY\d+-DAV\d+[A-Z0-9]{25}\@phx\.gbl>$/m
+header __HOTMAIL_BAYDAV_MSGID		MESSAGEID =~ /^<[A-Z]{3}\d+-(?:DAV|SMTP)\d+[A-Z0-9]{25}\@phx\.gbl>$/m
 
 header __IPLANET_MESSAGING_SERVER Received =~ /iPlanet Messaging Server/
 

Added: spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5946-1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5946-1?rev=729888&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5946-1 (added)
+++ spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5946-1 Mon Dec 29 04:44:36 2008
@@ -0,0 +1,32 @@
+Envelope-from: <xx...@sympatico.ca>
+Envelope-to: <xx...@cse.yorku.ca>
+Received: from [65.55.111.156] (helo=blu0-omc4-s17.blu0.hotmail.com)
+        by xxxxx.cs.yorku.ca with esmtp (Exim x.xx)
+        (envelope-from <xx...@sympatico.ca>)
+        id 1KKvTK-0001U2-7O
+        for xxxx@cse.yorku.ca; Mon, 21 Jul 2008 09:30:38 -0400
+Received: from BLU0-SMTP20 ([65.55.111.137]) by blu0-omc4-s17.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
+         Mon, 21 Jul 2008 06:30:33 -0700
+X-Originating-IP: [70.52.148.170]
+X-Originating-Email: [xxxx@sympatico.ca]
+Message-ID: <BL...@phx.gbl>
+Return-Path: xxxxx@sympatico.ca
+Received: from YUKIBEAR ([70.52.148.170]) by BLU0-SMTP20.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.2668);
+         Mon, 21 Jul 2008 06:30:32 -0700
+Reply-To: "xxxxxxxxxxxx" <xx...@sympatico.ca>
+From: "xxxxxxxxx" <xx...@sympatico.ca>
+To: "xxxx" <xx...@cse.yorku.ca>
+References: <BA...@CEZ.ICE> <48...@cse.yorku.ca>
+Subject: Re: Video of James&David on Wednesday
+Date: Mon, 21 Jul 2008 08:30:43 -0500
+MIME-Version: 1.0
+Content-Type: multipart/alternative;
+      boundary="----=_NextPart_000_0003_01C8EB0C.10D8D5C0"
+X-Priority: 3
+X-MSMail-Priority: Normal
+X-Mailer: Microsoft Outlook Express 6.00.2900.3138
+X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
+X-OriginalArrivalTime: 21 Jul 2008 13:30:32.0825 (UTC) FILETIME=[F3546E90:01C8EB35]
+
+Hi,
+

Added: spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5962-1
URL: http://svn.apache.org/viewvc/spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5962-1?rev=729888&view=auto
==============================================================================
--- spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5962-1 (added)
+++ spamassassin/trunk/t.rules/FORGED_MUA_OUTLOOK/fp-5962-1 Mon Dec 29 04:44:36 2008
@@ -0,0 +1,17 @@
+Received: from bay0-omc3-s31.bay0.hotmail.com (bay0-omc3-s31.bay0.hotmail.com [65.54.246.231])
+        by corpmail.outblaze.com (Postfix) with ESMTP
+        id 8F81B16DD84; Mon, 18 Aug 2008 08:04:42 +0000 (GMT)
+Received: from hotmail.com ([10.6.61.21]) by bay0-omc3-s31.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
+        Mon, 18 Aug 2008 01:04:41 -0700
+Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
+        Mon, 18 Aug 2008 01:04:40 -0700
+Message-ID: <BL...@phx.gbl>
+Received: from 76.254.79.201 by BLU110-DAV11.phx.gbl with DAV;
+        Mon, 18 Aug 2008 08:04:35 +0000
+X-Mailer: Microsoft Outlook Express 6.00.2900.3138
+X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
+From: foo@example.com
+To: foo@example.com
+Subject: foo
+
+foo