You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jonathan Nichols <jn...@pbp.net> on 2005/08/11 18:08:59 UTC
SUBJECT_MONTH
Huh? Subject didn't have month in it at all.. :(
----
Return-Path: <di...@panainfo.com>
Received: from mailgate.pbp.net (mailgate.pbp.net [192.168.10.87])
by mail.pbp.net (Postfix) with ESMTP id 95CA7117720
for <ho...@pbp.net>; Thu, 11 Aug 2005 05:24:29 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
by mailgate.pbp.net (Postfix) with ESMTP id 713171C58
for <ho...@pbp.net>; Thu, 11 Aug 2005 05:24:29 -0700 (PDT)
Received: from mailgate.pbp.net ([127.0.0.1])
by localhost (mailgate [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 12512-01 for <ho...@pbp.net>; Thu, 11 Aug 2005 05:24:25 -0700
(PDT)
Received: from mail2.pbp.net (zhaan5.schurman.com [63.192.52.209])
by mailgate.pbp.net (Postfix) with ESMTP id 1F9E4299FC
for <ho...@pbp.net>; Thu, 11 Aug 2005 05:24:25 -0700 (PDT)
Received: from panainfo.com (unknown [222.67.205.152])
by mail2.pbp.net (Postfix) with SMTP id 5E3AF18F76D
for <ho...@pbp.net>; Thu, 11 Aug 2005 05:10:33 -0700 (PDT)
Message-ID: <b8...@dianeley>
From: "deadra ortiz" <di...@panainfo.com>
To: "Jaquelyn Hudson" <jo...@pbp.net>
Cc: <la...@pbp.net>, <ho...@pbp.net>, <ro...@pbp.net>
Subject: We may be able to help you eradicate your student loans.
Date: Wed, 10 Aug 2005 15:00:23 +1000
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Virus-Scanned: by amavisd-new at mailgate.pbp.net
X-Spam-Status: No, hits=1.852 tagged_above=-999 required=6
tests=[DATE_IN_PAST_24_48=0.302, FORGED_RCVD_HELO=0.05, GEOCITIES=4,
SUBJECT_MONTH=-2.5]
X-Spam-Level: *
Re: SUBJECT_MONTH
Posted by Ben O'Hara <bo...@gmail.com>.
> Subject: We may be able to help you eradicate your student loans.
Erm, "may" is a month afaik :-)
Ben
On 8/11/05, Jonathan Nichols <jn...@pbp.net> wrote:
> Huh? Subject didn't have month in it at all.. :(
>
>
> ----
>
>
> Return-Path: <di...@panainfo.com>
> Received: from mailgate.pbp.net (mailgate.pbp.net [192.168.10.87])
> by mail.pbp.net (Postfix) with ESMTP id 95CA7117720
> for <ho...@pbp.net>; Thu, 11 Aug 2005 05:24:29 -0700 (PDT)
> Received: from localhost (localhost [127.0.0.1])
> by mailgate.pbp.net (Postfix) with ESMTP id 713171C58
> for <ho...@pbp.net>; Thu, 11 Aug 2005 05:24:29 -0700 (PDT)
> Received: from mailgate.pbp.net ([127.0.0.1])
> by localhost (mailgate [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
> id 12512-01 for <ho...@pbp.net>; Thu, 11 Aug 2005 05:24:25 -0700
> (PDT)
> Received: from mail2.pbp.net (zhaan5.schurman.com [63.192.52.209])
> by mailgate.pbp.net (Postfix) with ESMTP id 1F9E4299FC
> for <ho...@pbp.net>; Thu, 11 Aug 2005 05:24:25 -0700 (PDT)
> Received: from panainfo.com (unknown [222.67.205.152])
> by mail2.pbp.net (Postfix) with SMTP id 5E3AF18F76D
> for <ho...@pbp.net>; Thu, 11 Aug 2005 05:10:33 -0700 (PDT)
> Message-ID: <b8...@dianeley>
> From: "deadra ortiz" <di...@panainfo.com>
> To: "Jaquelyn Hudson" <jo...@pbp.net>
> Cc: <la...@pbp.net>, <ho...@pbp.net>, <ro...@pbp.net>
> Subject: We may be able to help you eradicate your student loans.
> Date: Wed, 10 Aug 2005 15:00:23 +1000
> MIME-Version: 1.0
> Content-Type: text/plain;
> charset="us-ascii"
> Content-Transfer-Encoding: 7bit
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 5.50.4133.2400
> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
> X-Virus-Scanned: by amavisd-new at mailgate.pbp.net
> X-Spam-Status: No, hits=1.852 tagged_above=-999 required=6
> tests=[DATE_IN_PAST_24_48=0.302, FORGED_RCVD_HELO=0.05, GEOCITIES=4,
> SUBJECT_MONTH=-2.5]
> X-Spam-Level: *
>
--
"There are 10 types of IT people. Those who understand binary and
those who don't."
Re: SUBJECT_MONTH
Posted by Jonathan Nichols <jn...@pbp.net>.
> Sure there is.. Perhaps you forgot about the month of May.
>
*smacks forehead like the moron he is*
D'oh!
> If you aren't running 2.43 or older, perhaps you should find out why you have
> rules from 2.43 in your config.
I'm running 3.x - I've just been dragging around the same local.cf since
2.x :)
I'm going to go remove that rule right now.
thanks! :)
Re: SUBJECT_MONTH
Posted by Matt Kettler <mk...@evi-inc.com>.
Jonathan Nichols wrote:
> Huh? Subject didn't have month in it at all.. :(
>
>
<snip>
> Subject: We may be able to help you eradicate your student loans.
Sure there is.. Perhaps you forgot about the month of May.
That said, the SUBJECT_MONTH rule hasn't existed since SpamAssassin 2.44.
Versions prior to 2.43 suffer from the FP of any subject that contains the word
"may". 2.44 fixed that, and later versions eliminated the rule entirely because
it sucks.
If you're running SA 2.43 you *REALLY* should consider upgrading. No.. Really.
ASAP> That version is so old I couldn't even tell you which DoSes affect it. I
only track DoS vulnerabilities in 2.50 and newer. Consider that SA 2.43 was
released in October of 2002. Ouch! Not good for a product that needs
semi-regular updates.
If you aren't running 2.43 or older, perhaps you should find out why you have
rules from 2.43 in your config.