Bug 2096 - FORGED_MUA_OUTLOOK doesn't honor X-Mailer: Oracle Outlook Connector 3.4 40812
Summary: FORGED_MUA_OUTLOOK doesn't honor X-Mailer: Oracle Outlook Connector 3.4 40812
Status: RESOLVED DUPLICATE of bug 2538
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 2.55
Hardware: PC FreeBSD
: P5 minor
Target Milestone: 2.70
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
: 2298 (view as bug list)
Depends on:
Blocks: 2344
  Show dependency tree
 
Reported: 2003-06-19 08:33 UTC by Adam
Modified: 2003-10-01 10:10 UTC (History)
1 user (show)


Attachment Type Modified Status Actions Submitter/CLA Status
A test email that has the oracle Outlook connector in the headers message/rfc822 None Joe Zimmerman [NoCLA]
a message from the Oracle Connector MUA text/plain None Jeffrey Eaton [NoCLA]
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Adam 2003-06-19 08:33:22 UTC 
Mail from a legit source using a legit version of Outlook was tagged by the
FORGED_MUA_OUTLOOK rule.  I think the rule is not aware of the possibility of
Outlook clients sending through something called "Oracle Outlook Connector 3.4".
 Here are the headers from the message:

Received: from smtp.lcc.edu (smtp.lcc.edu [172.31.2.10])
 by mail2.lcc.edu (Postfix) with ESMTP id 4D74886F53
 for <hidden@egr.msu.edu>; Wed, 18 Jun 2003 09:26:23 -0400 (EDT)
Received: from star.lcc.edu (hidden.star.lcc.edu [10.4.3.51])
 (authenticated)
 by smtp.lcc.edu (8.11.6/8.11.6) with ESMTP id h5IDJA120101
 for <hidden@egr.msu.edu>; Wed, 18 Jun 2003 09:19:10 -0400
Message-Id: <200306181319.h5IDJA120101@smtp.lcc.edu>
From: Hidden <hidden@lcc.edu>
To: Hidden <hidden@egr.msu.edu>
Subject: RE: hockey stick..
Date: Wed, 18 Jun 2003 09:26:15 -0400
X-Mailer: Oracle Outlook Connector 3.4 40812
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Scanned: by amavisd-new
Comment 1 Daniel Quinlan 2003-06-22 22:18:11 UTC 
We could use an entire example message in original format.

(Please use the "Create a New Attachment" link to attach the message, don't
cut-and-paste.)
Comment 2 Joe Zimmerman 2003-06-23 08:17:27 UTC 
Created attachment 1085 [details]
A test email that has the oracle Outlook connector in the headers
Comment 3 Malte S. Stretz 2003-08-07 06:05:45 UTC 
*** Bug 2298 has been marked as a duplicate of this bug. ***
Comment 4 Justin Mason 2003-08-18 21:28:33 UTC 
note: the bug marked as a dup uses a slightly different format:

X-Mailer: CorporateTime Outlook Connector 3.3 40513

note, no mention of Oracle.
Comment 5 Jeffrey Eaton 2003-08-29 09:59:53 UTC 
Oracle bought out Steltor, the makers of the CorporateTime
calendaring/scheduling product.  Old releases were called the 'CorporateTime
Connector', new releases are called the 'Oracle Connector for Outlook'.

I'm attaching a message which was misclassified by Spamassassin which came from
the Oracle connector.
Comment 6 Jeffrey Eaton 2003-08-29 10:02:21 UTC 
Created attachment 1294 [details]
a message from the Oracle Connector MUA
Comment 7 Daniel Quinlan 2003-10-01 18:10:28 UTC 
merging into meta bug 2538


*** This bug has been marked as a duplicate of 2538 ***