[Bug 2876] New: Fake reply detection

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=2876

           Summary: Fake reply detection
           Product: Spamassassin
           Version: 2.61
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: spamassassin-dev@incubator.apache.org
        ReportedBy: jeroen@wolffelaar.nl


Spammers not unusally forget to include a 'In-reply-to:' header when they make
their message look like a reply. That header is nearly always included in
legitimate mail (because MUA's insert it so that threading works right). This is
a test:

header __J_IN_REP_TO    In-Reply-To =~ /./
header __J_SUBJ_HAS_RE  Subject =~ /^Re:/
meta J_REPLY_WO_IRT     (__J_SUBJ_HAS_RE && !__J_IN_REP_TO)
describe J_REPLY_WO_IRT Subject indicates reply but has no In-Reply-To:
score J_REPLY_WO_IRT    2



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.