You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2005/08/03 13:21:54 UTC

[Bug 4514] New: Hotmail/dav mail from Outlook Express marked as FORGED_MUA_OUTLOOK

http://bugzilla.spamassassin.org/show_bug.cgi?id=4514

           Summary: Hotmail/dav mail from Outlook Express marked as
                    FORGED_MUA_OUTLOOK
           Product: Spamassassin
           Version: 3.0.4
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: spamassassin
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: mail-sabugs@codingdomain.com


I've received an e-mail from an Outlook Express user, which was classified by 
SpamAssassin as "pretending to be from MS Outlook" (FORGED_MUA_OUTLOOK). The 
message is sent with Hotmail/DAV using Outlook Express. 
 
The following message headers were set in the message: 
(e-mail addresses are obscured) 
 
Return-Path: <ab...@hotmail.com> 
Delivered-To: unknown 
Received: from localhost (127.0.0.1) by hal9000.lan with POP3; 30 Jul 2005 
  16:40:10 -0000 
X-Message-Status: n 
X-SID-PRA: Jacqueline van der Boor <ab...@hotmail.com> 
X-SID-Result: Pass 
X-Message-Info: JGTYoYF78jEafRozV/cx/od5nI/7YDQaER5YipylsP8= 
Received: from hotmail.com ([64.4.18.190]) by mc12-f7.hotmail.com with 
Microsoft SMTPSVC(6.0.3790.211); 
	 Sat, 30 Jul 2005 09:12:07 -0700 
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; 
	 Sat, 30 Jul 2005 09:12:08 -0700 
Message-ID: <BA...@phx.gbl> 
Received: from abc.def.241.208 by BAY24-DAV10.phx.gbl with DAV; 
	Sat, 30 Jul 2005 16:12:07 +0000 
X-Originating-IP: [abc.def.241.208] 
X-Originating-Email: [abc@hotmail.com] 
X-Sender: abc@hotmail.com 
From: "Jacqueline van der Boor" <ab...@hotmail.com> 
To: "Diederik van der Boor" <xy...@hotmail.com> 
References: <20...@hotmail.com> 
Subject: Re: Verjaardag 
Date: Sat, 30 Jul 2005 18:14:54 +0200 
MIME-Version: 1.0 
Content-Type: text/plain; 
	charset="iso-8859-1" 
Content-Transfer-Encoding: 7bit 
X-Priority: 3 
X-MSMail-Priority: Normal 
X-Mailer: Microsoft Outlook Express 6.00.2800.1106 
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 
X-OriginalArrivalTime: 30 Jul 2005 16:12:08.0140 (UTC) 
FILETIME=[6F29D8C0:01C59521]



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Re: [Bug 4514] New: Hotmail/dav mail from Outlook Express marked as FORGED_MUA_OUTLOOK

Posted by Loren Wilton <lw...@earthlink.net>.
Are you SURE that was a valid message?  If so, it will be the first recorded
instance of X-Message-Info showing up in ham and not only in spam.
Previously that had been a sure sign of a spam tool generated mail.


[Bug 4514] Hotmail/dav mail from Outlook Express marked as FORGED_MUA_OUTLOOK

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4514





------- Additional Comments From mail-sabugs@codingdomain.com  2005-08-12 01:11 -------
> Note: This is happening in version 2.55, it may be fixed in later versions.  
  
Unforunately, I'm using spamassassin version 3.0.4 here... :-/ 
 
I didn't understand much of the remaining message, but I think it wasn't ment 
specifically for me I guess. ;-) 



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4514] Hotmail/dav mail from Outlook Express marked as FORGED_MUA_OUTLOOK

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4514





------- Additional Comments From kernel@pkts.ca  2005-08-11 14:50 -------
In the email I'm looking at, the mail arrived at my server without a msgid, so
sendmail promptly added one, and the message proceeded to fail 
MSG_ID_ADDED_BY_MTA_2 as well as this one:

  meta FORGED_MUA_OUTLOOK         (__OUTLOOK_MUA && !__UNUSABLE_MSGID &&
!(__OUTLOOK_MSGID_1 || __OUTLOOK_MSGID_2 || __IMS_MSGID))

In addition, the header line:

  X-Mailer:  Microsoft Office Outlook, Build 11.0.5510

doesn't match:

  header __HAS_OUTLOOK_IN_MAILER  X-Mailer =~ /Microsoft (CDO|Outlook)\b/

in the file 20_head_tests.cf, which triggers MISSING_OUTLOOK_NAME.

Note: This is happening in version 2.55, it may be fixed in later versions.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4514] Hotmail/dav mail from Outlook Express marked as FORGED_MUA_OUTLOOK

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4514


sidney@sidney.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE




------- Additional Comments From sidney@sidney.com  2005-09-20 07:37 -------
This is fixed in SpamAssassin 3.1. Closing as duplicate of bug 4065


*** This bug has been marked as a duplicate of 4065 ***



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.