You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2009/02/14 20:11:45 UTC

[Bug 6067] New: SpamAssassin is currently unable to reliably detect The Bat! by Message-ID; rule FORGED_MUA_THEBAT_MSGID is missing

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6067

           Summary: SpamAssassin is currently unable to reliably detect The
                    Bat! by Message-ID; rule FORGED_MUA_THEBAT_MSGID  is
                    missing
           Product: Spamassassin
           Version: 3.2.5
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: max@ritlabs.com


A reliable way to detect The Bat! is by message-id, not by x-mailer.

Here is the Delphi code from The Bat! that makes the message-id:

      Result := Format('<%d%d.%4.4d%2.2d%2.2d%2.2d%2.2d%2.2d@%s>',
                         [Random(200), Random(MaxInt div 200), Year,
                          Month, Day, Hour, Min, Sec, S]);

where 
 * Random(n) gives [0..n-1]
 * MaxInt div 200 = 10737418
 * Year, Month, Day, Hour, Min, Sec are in local time
 * S contains an FQDN

 For example, Message-ID: <17...@ritlabs.com>


We should add the following rule:

meta FORGED_MUA_THEBAT_MSGID    (__THEBAT_MUA && !__BAT_MSGID)


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6067] SpamAssassin is currently unable to reliably detect The Bat! by Message-ID; rule FORGED_MUA_THEBAT_MSGID is missing

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6067


Justin Mason <jm...@jmason.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|Undefined                   |3.2.6




-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6067] SpamAssassin is currently unable to reliably detect The Bat! by Message-ID; rule FORGED_MUA_THEBAT_MSGID is missing

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6067


Justin Mason <jm...@jmason.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Depends on|                            |6068




--- Comment #1 from Justin Mason <jm...@jmason.org>  2009-03-02 10:05:37 PST ---
hi Maxim -- just got a chance to look at this.

We *did* have a Bat!-message-id-recognition rule, but we found that it got
higher false positive rates than other rules that looked for other aspects of
Bat! formatting.  Unfortunately a small but significant number of mailing lists
rewrite the Message ID -- more than rewrite other aspects of the message.

You can see the discussion here:

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=2294#c8

'Note that FORGED_MUA_THEBAT_BOUN and FORGED_THEBAT_HTML catch very nearly the
same amount of stuff as FORGED_MUA_THEBAT, without any false positives; also
note that we *keep* running into gateways mangling the message-ids, and wierd
bug reports like this.   So I suggest we just nuke FORGED_MUA_THEBAT in 2.61
(and possibly tweak scores a little to make up, if required -- but I doubt it
will be.)'

bug 6068 -- using the Date: header formatting -- might be useful as an
alternative, however.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6067] SpamAssassin is currently unable to reliably detect The Bat! by Message-ID; rule FORGED_MUA_THEBAT_MSGID is missing

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6067


Justin Mason <jm...@jmason.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|3.2.6                       |3.3.0




-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6067] SpamAssassin is currently unable to reliably detect The Bat! by Message-ID; rule FORGED_MUA_THEBAT_MSGID is missing

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6067


Justin Mason <jm...@jmason.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX
   Target Milestone|3.3.0                       |3.2.6




--- Comment #2 from Justin Mason <jm...@jmason.org>  2009-03-29 13:17:22 PST ---
closing, as per prev comment


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.