[Bug 6235] New: 'From' domain does not match 'Received' headers

[bu...@bugzilla.spamassassin.org]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6235

           Summary: 'From' domain does not match 'Received' headers
           Product: Spamassassin
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: vlb@cfcl.com


There is currently a test  FORGED_YAHOO_RCVD for
    'From' yahoo.com does not match 'Received' headers

I'd like to see a more general test
   'From' domain does not match 'Received' headers

It should probably come with a low score byt default but I think matching the
actual sender domain to the From line would catch a LOT of trash

A rule like this should also be made easy to edit. Some of the most typical
spam is mail that purports to be "from me" or other accounts in my domain,
whatever my address happens to be.  Now that I know about this rule, I'm going
to copy and edit it for my domain.

But if I hadn't een _looking_ for a "domain doesn't match Received headers"
(actually I was searching for "Forged") I wouldnt have found this. I'm guessing
a lot of people who could make good use of a copy of this rule don't know it
exists.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6235] 'From' domain does not match 'Received' headers

[bu...@bugzilla.spamassassin.org]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6235

Vicki Brown <vl...@cfcl.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |vlb@cfcl.com

--- Comment #1 from Vicki Brown <vl...@cfcl.com> 2009-11-06 16:13:14 UTC ---
Drat. That's an actual function call. It's not going to be easy to copy and
customize. 

All the more reason to make that easy on the SA side so users have another tool
on their end.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.