[Bug 4496] New: FPS with FORGED_MUA_OIMO

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=4496

           Summary: FPS with FORGED_MUA_OIMO
           Product: Spamassassin
           Version: 3.1.0
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: mbr@freebsd.org


I see some FPS per day relating from FORGED_MUA_OIMO. The problem seems to
be that there are clients out there which don't add e MSGID to mails. And
we see then MSGID_FROM_MTA_ID matching.

If we change the test to be:

meta FORGED_MUA_OIMO           (__OIMO_MUA && !__OIMO_MSGID &&
!__OUTLOOK_DOLLARS_MSGID && !__UNUSABLE_MSGID && !MSGID_FROM_MTA_ID)

the FPS cases are fixed. I've looked at the last three days:

yesterday:

58 ALL FORGED_MUA_OIMO
 1 SPM FORGED_MUA_OIMO + MSGID_FROM_MTA_ID
 3 HAM FORGED_MUA_OIMO + MSGID_FROM_MTA_ID

today:

62 ALL FORGED_MUA_OIMO
 1 SPM FORGED_MUA_OIMO + MSGID_FROM_MTA_ID
15 HAM FORGED_MUA_OIMO + MSGID_FROM_MTA_ID



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4496] FPS with FORGED_MUA_OIMO

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4496





------- Additional Comments From jm@jmason.org  2007-01-05 08:49 -------
Please attach (in RFC-822 format, as an attachment, not pasted) the full
headers and body of sample messages.  Thanks.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4496] FPS with FORGED_MUA_OIMO

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4496





------- Additional Comments From paulg@cse.yorku.ca  2007-11-22 08:13 -------
Created an attachment (id=4190)
 --> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=4190&action=view)
header that triggers false positive

This is all I could find from the Exim log, I hope it can you. Here are the
rules that are triggered.

FORGED_MUA_OIMO
MSGID_FROM_MTA_HEADER
SPF_PASS 




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4496] FPS with FORGED_MUA_OIMO

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4496





------- Additional Comments From paulg@cse.yorku.ca  2007-11-22 09:15 -------
Created an attachment (id=4191)
 --> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=4191&action=view)
patch for 20_ratware.cf to fix false positive

Here is a patch that I made to fixed the false triggering of FORGED_MUA_OIMO



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.