You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2009/02/23 20:49:16 UTC

[Bug 6073] New: RCVD_BAD_ID FP

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6073

           Summary: RCVD_BAD_ID FP
           Product: Spamassassin
           Version: 3.2.5
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: scheidell@secnap.net


RCVD_BAD_ID hit on this email: yes, lotus notes ALWAYS does wierd things.
(and, not, mcgraw-hill was not hacked into by zombie spambots)

I suppose this is the line that caused this?

 with ESMTP id 2009022020022788:53204 ;



Received: from corp55wmr5-7.mcgraw-hill.com (corp55wmr5-12.mcgraw-hill.com
[198.45.19.197])
        by mailserver.mcnabweb.com (Postfix) with ESMTP id 4E5EE15EDC5
        for <us...@domain.com>; Fri, 20 Feb 2009 20:02:30 -0500 (EST)
X-IronPort-AV: E=Sophos;i="4.38,244,1233550800"; 
   d="scan'208,217";a="379912035"
Received: from unknown (HELO NYCAPP022.mhf2.mhf.mhc) ([151.108.226.119])
  by corp55wmr5-1.mcgraw-hill.com with ESMTP; 20 Feb 2009 20:02:28 -0500
Received: from sqnt11 ([192.34.110.54])
          by NY1APP051.mhf2.mhf.mhc (Lotus Domino Release 5.0.12)
          with ESMTP id 2009022020022788:53204 ;
          Fri, 20 Feb 2009 20:02:27 -0500 
Message-ID: <25...@sqnt11>
Date: Fri, 20 Feb 2009 20:02:27 -0500 (EST)
From: cusip_confirmation@standardandpoors.com
To: user@domain.com
Subject: CUSIP Confirmation: CHINA INTL TOURISM HLDGS LTD
MIME-Version: 1.0
charset: ISO-8859-1
X-MIMETrack: Itemize by SMTP Server on NY1APP051/SPAPPS(Release 5.0.12 
|February 13, 2003) at
 02/20/2009 08:02:27 PM,
        Serialize by Router on NYCAPP022/SPAPPS(Release 5.0.12  |February 13,
2003) at
 02/20/2009 08:02:28 PM,
        Serialize complete at 02/20/2009 08:02:28 PM
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=us-ascii


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6073] RCVD_BAD_ID FP

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6073

Henrik Krohns <he...@hege.li> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |hege@hege.li
         Resolution|                            |FIXED

--- Comment #2 from Henrik Krohns <he...@hege.li> 2011-05-01 22:36:25 UTC ---
This is disabled in 3.3+, but removed colon from rule anyway to be sure.

Sending        rulesrc/sandbox/felicity/70_other.cf
Transmitting file data .
Committed revision 1098426.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6073] RCVD_BAD_ID FP

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6073


John Wilcock <jo...@tradoc.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |john@tradoc.fr




--- Comment #1 from John Wilcock <jo...@tradoc.fr>  2009-05-27 05:02:30 PST ---
I've seen similar FPs from Lotus Domino:

Received: from titiana ([10.126.208.155])
          by snpar13.prod.par.ca-indosuez.com
          (Lotus Domino Release 5.0.10)
          with ESMTP id 2009051419545082:57354 ;
          Thu, 14 May 2009 19:54:50 +0200

Received: from CSLWMES01 ([172.16.84.2])
          by mta-out.gfi.fr (Lotus Domino Release 5.0.11)
          with ESMTP id 2009052713355315:113613 ;
          Wed, 27 May 2009 13:35:53 +0200

The colon in the id is clearly the problem, but I can't suggest a correction as
I don't have any spam hits for this rule so don't know what it's trying to
catch.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.