[Bug 5516] New: Legitimate email scores as forged MS Outlook

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5516

           Summary: Legitimate email scores as forged MS Outlook
           Product: Spamassassin
           Version: 3.1.8
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: list0570@paradise.net.nz


I keep on having trouble with a particular sender whos emails are being scored 
as being from forged MS Outlook. The emails are definitely ham, the person 
probably uses a Win9x. Headers are:

MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-Priority: 3
X-MSMail-priority: Normal
References: <Wc...@kereru>
Message-Id: <BV...@kereru>

SA scores:

 4.1 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook

and with a score that high, it's practically over the limit already.
SA's detection of outlook emails is too wide in scope.

Thanks!



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5516] Legitimate email scores as forged MS Outlook

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5516





------- Additional Comments From jm@jmason.org  2007-06-14 03:34 -------
we'll need to see full headers -- a full message if possible, as an attachment.

my preliminary guess is that something in their mailserver is removing
message-IDs and replacing them with different ones.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5516] Legitimate email scores as forged MS Outlook

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5516


list0570@paradise.net.nz changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Additional Comments From list0570@paradise.net.nz  2007-06-14 05:04 -------
Thanks for getting me on track Justin, you're right. Message-id: was recreated 
when the email was forwarded, with the other 3 outlook headers being the same 
it's tripping SA's test.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.