You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Ben Wylie <sa...@benwylie.co.uk> on 2006/09/14 11:15:13 UTC
FORGED_YAHOO_RCVD
The FORGED_YAHOO_RCVD rule seems to hit falsely.
I am using SpamAssassin 3.1.2 on Windows 2003 Server.
Can anyone see why the following headers hit this rule?
The email was a genuine yahoo email from a friend telling me about a
photo album he had put up.
* 1.8 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received'
* headers
Received: from n2a.bullet.re4.yahoo.com ([206.190.56.42])
by server. (NAVGW 2.5.2.12) with SMTP id M2006091404064724917
for <me...@mydomain.com>; Thu, 14 Sep 2006 04:06:54 +0100
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=gcom1024; d=yahoo.com;
b=DVHUYDMPhkxYuCuRBQPIG2ib2Zz1AE3yB45w/RHqnbLpv2/t2S1devXlkqyvQ6h6tFNe32P7qFmNfgU4IUGaaOf8jYsru/PygRE8RSbG9VvtbhMYaXZXIURPRafjFNnQPuIZSDpqZjsIlE/O0sRCA3IbiLR0SstlylhWyERObCk=;
Received: from [68.142.230.28] by n2.bullet.re4.yahoo.com with NNFMP; 14
Sep 2006 03:03:10 -0000
X-yahoo-newman-property: photos
X-yahoo-newman-id: null
Received: from [206.190.51.20] by t1.bullet.re2.yahoo.com with NNFMP; 14
Sep 2006 03:03:10 -0000
Date: 13 Sep 2006 20:03:10 -0700
Received: from [127.0.0.1] by up4.ph.re2.yahoo.com with NNFMP; 14 Sep
2006 03:03:10 -0000
Thanks
Ben
Re: FORGED_YAHOO_RCVD
Posted by "John D. Hardin" <jh...@impsec.org>.
On Thu, 14 Sep 2006, Ben Wylie wrote:
> The FORGED_YAHOO_RCVD rule seems to hit falsely.
> I am using SpamAssassin 3.1.2 on Windows 2003 Server.
>
> Can anyone see why the following headers hit this rule?
> The email was a genuine yahoo email from a friend telling me about a
> photo album he had put up.
>
> * 1.8 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received'
> * headers
I've also seen that with 3.1.4 on mail received from yahoo's "support" desk.
--
John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
What nuts do with guns is terrible, certainly. But what evil or crazy
people do with *anything* is not a valid argument for banning that
item. -- John C. Randolph <jc...@idiom.com>
-----------------------------------------------------------------------
3 days until The 219th anniversary of the signing of the U.S. Constitution