DATE_IN_FUTURE_03_06 not allowing for TZ diff

[net-buoy <ma...@interak.com>]

I am seeing e-mail getting points for being 3-6 hrs in future....  While it
looks like this is a result of improperly set system time on the sending
MTA,  I wanted to bounce this off someone to make sure this is not a
spamassassin issue.

With respect to a recent e-mail (headers below):
Time actually received ADT is 15:45
ADT is -8 UTC and local mail reflects 15:45 -0800 AKDT
Time mail actually sent is EDT 19:45. EDT is 4 hrs earlier than ADT
Time shown on e-mail:  18 Aug 2007 23:45:02 -0400 EDT
But, e-mail shows as being sent at 7:45 p.m.

It looks like the sending MTA (at allexperts.com) should have encoded the
message as 19:45 -0400 EDT,  not 23:45 -0800 EDT.  In that case
spammassassin would not have seen the mail as 3-6 hrs in the future.

Do I have that right or am I missing something??


*************************************************
Return-Path: <xx...@yyyyyyyyy.com>
Received: from myhost.fqdn ([unix socket])
	 by myhost (Cyrus v2.2.12) with LMTPA;
	 Sat, 18 Aug 2007 15:45:08 -0800
X-Sieve: CMU Sieve 2.2
Received: by myhost.fqdn (Postfix, from userid 65534)
	id 2B24721B76; Sat, 18 Aug 2007 15:45:08 -0800 (AKDT)
Received: from localhost by myhost.fqdn
	with SpamAssassin (version 3.1.8);
	Sat, 18 Aug 2007 15:45:08 -0800
From: <xx...@yyyyyyyyy.com>
To: me
Subject: ****SPAM(6.0)****  Receipt
Date: 18 Aug 2007 23:45:02 -0400 EDT
Message-Id: <20...@fqdn>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on myhost.fqdn
X-Spam-Level: *****
X-Spam-Status: Yes, score=6.0 required=5.0 tests=AWL,BAYES_50,
	DATE_IN_FUTURE_03_06,INVALID_DATE,MSGID_FROM_MTA_ID,NO_OBLIGATION
	autolearn=no version=3.1.8
MIME-Version: 1.0
-- 
View this message in context: http://www.nabble.com/DATE_IN_FUTURE_03_06-not-allowing-for-TZ-diff-tf4291923.html#a12218202
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: DATE_IN_FUTURE_03_06 not allowing for TZ diff

[Kai Schaetzl <ma...@conactive.com>]

Net-buoy wrote on Sat, 18 Aug 2007 17:24:22 -0700 (PDT):

> Time actually received ADT is 15:45
> ADT is -8 UTC and local mail reflects 15:45 -0800 AKDT

23:45 UTC

> Time mail actually sent is EDT 19:45. EDT is 4 hrs earlier than ADT
> Time shown on e-mail:  18 Aug 2007 23:45:02 -0400 EDT

3.45 UTC next day, I think the added timezone acronym is of no relevance, 
it's just informational and should be equivalent to "-0400 UTC".

> It looks like the sending MTA (at allexperts.com) should have encoded the
> message as 19:45 -0400 EDT,  not 23:45 -0800 EDT.

There is no such value, so I'm not sure what you mean. The problem is that 
this

Date: 18 Aug 2007 23:45:02 -0400 EDT

is 3.45 UTC in the future. And that is the same what the first received 
line (see above) is showing. So, both data are accurate, but the system 
time is wrong.

AFAIK in "19:45 -0400 EDT" only the local offset is relevant. It doesn't 
mean "4 hours before EDT". It means "4 hours before UTC and that is EDT".

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com