You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@spamassassin.apache.org on 2026/06/24 14:24:50 UTC
[Bug 8400] New: AMAZON_IMG_NOT_RCVD_AMZN: Add m.media-amazon.com
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8400
Bug ID: 8400
Summary: AMAZON_IMG_NOT_RCVD_AMZN: Add m.media-amazon.com
Product: Spamassassin
Version: unspecified
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Rules
Assignee: dev@spamassassin.apache.org
Reporter: pmenzel+bz.apache.org-spamassassin@molgen.mpg.de
Target Milestone: Undefined
```
$ whois media-amazon.com
Domain Name: MEDIA-AMAZON.COM
[…]
Registrant Name: Hostmaster, Amazon Legal Dept.
Registrant Organization: Amazon Technologies, Inc.
Registrant Street: P.O. Box 8102
Registrant City: Reno
Registrant State/Province: NV
Registrant Postal Code: 89507
Registrant Country: US
Registrant Phone: +1.2062664064
Registrant Phone Ext:
Registrant Fax: +1.2062667010
Registrant Fax Ext:
Registrant Email: hostmaster@amazon.com
Tech Name: Hostmaster, Amazon Legal Dept.
Tech Phone: +1.2062664064
Tech Email: hostmaster@amazon.com
[…]
```
Die IP gehört zum Fastlys CDN:
```
$ host m.media-amazon.com
m.media-amazon.com is an alias for tp.c47710ee9-frontier.media-amazon.com.
tp.c47710ee9-frontier.media-amazon.com is an alias for f.media-amazon.com.
f.media-amazon.com is an alias for media.amazon.map.fastly.net.
media.amazon.map.fastly.net has address 151.101.5.16
media.amazon.map.fastly.net has IPv6 address 2a04:4e42:1::272
```
```
$ whois 151.101.5.16
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 151.101.0.0 - 151.101.255.255
CIDR: 151.101.0.0/16
NetName: SKYCA-3
NetHandle: NET-151-101-0-0-1
Parent: RIPE-ERX-151 (NET-151-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Fastly, Inc. (SKYCA-3)
[…]
```
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 8400] AMAZON_IMG_NOT_RCVD_AMZN: Add m.media-amazon.com
Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8400
Sidney Markowitz <si...@sidney.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |INVALID
Status|NEW |RESOLVED
CC| |sidney@sidney.com
--- Comment #4 from Sidney Markowitz <si...@sidney.com> ---
Why invalid: The rule works as designed on this pattern
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 8400] AMAZON_IMG_NOT_RCVD_AMZN: Add m.media-amazon.com
Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8400
John Hardin <jh...@impsec.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jhardin@impsec.org
--- Comment #1 from John Hardin <jh...@impsec.org> ---
Please also provide the Received headers external to your MTA. You didn't
provide any evidence for where that domain appears in the message.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 8400] AMAZON_IMG_NOT_RCVD_AMZN: Add m.media-amazon.com
Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8400
Paul Menzel <pm...@molgen.mpg.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |pmenzel+bz.apache.org-spama
| |ssassin@molgen.mpg.de
--- Comment #2 from Paul Menzel <pm...@molgen.mpg.de> ---
It was a legitimate email from an gmx.de address:
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21])
by b1241.mx.srv.dfn.de (Postfix) with ESMTPS id DE0403C0110
The email contained in the text/plain part:
The image from m.media-amazon.com was legitimate.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 8400] AMAZON_IMG_NOT_RCVD_AMZN: Add m.media-amazon.com
Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8400
--- Comment #3 from John Hardin <jh...@impsec.org> ---
The validity of the image is not relevant to the rule. The rule detects "an
image hosted by Amazon in a message that is not from Amazon". This is a common
merchandise spammer practice.
That a non-spam message hit some spam rules is not an issue - SpamAssassin
scores on multiple rules and this one is not by itself a "poison pill". Such
rules are extremely rare.
What was the _total_ score on the message?
--
You are receiving this mail because:
You are the assignee for the bug.