Bug 4005 - Yahoo groups messages flagged as forged
Summary: Yahoo groups messages flagged as forged
Status: RESOLVED FIXED
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Libraries (show other bugs)
Version: 3.0.1
Hardware: All All
: P5 normal
Target Milestone: 3.0.2
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-11-28 05:03 UTC by Klaus Johannes Rusch
Modified: 2004-12-15 07:00 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
One Example text/plain None Michael Parker [HasCLA]
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Klaus Johannes Rusch 2004-11-28 05:03:09 UTC 
Yahoo groups messages seem to be routed slightly differently now, with the
server name in the Received headers containing NNFMP in the bulk.scd.yahoo.com
subdomain instead of grp.scd.yahoo.com:

EvalTests.pm:
/from \[$IP_ADDRESS\] by \S+\.(?:groups|grp\.scd)\.yahoo\.com with NNFMP/

Received headers with NNFMP:
from [66.218.69.1] by n22.bulk.scd.yahoo.com with NNFMP; 25 Nov
from [66.218.66.30] by mailer1.bulk.scd.yahoo.com with NNFMP; 25 (qmail 52933
invoked
from [66.218.69.2] by n3.bulk.scd.yahoo.com with NNFMP; 25 Nov
from [66.218.67.163] by mailer2.bulk.scd.yahoo.com with NNFMP; 25 (qmail 18949
invoked
from [66.218.69.3] by n8.bulk.scd.yahoo.com with NNFMP; 25 Nov
from [66.218.67.164] by mailer3.bulk.scd.yahoo.com with NNFMP; 25

Proposed fix:
/from \[$IP_ADDRESS\] by \S+\.(?:groups|(grp|bulk)\.scd)\.yahoo\.com with NNFMP/
Comment 1 Daniel Quinlan 2004-11-28 14:59:52 UTC 
assigning to 3.0.2 queue
Comment 2 Michael Parker 2004-12-01 12:53:15 UTC 
Can you please attach a sample email that is triggering the rule.

Thanks
Comment 3 Michael Parker 2004-12-01 13:27:37 UTC 
Created attachment 2542 [details]
One Example

Here is one example that triggers the rule.
Comment 4 Daniel Quinlan 2004-12-15 16:00:14 UTC 
I believe this to be fixed in both head and future 3.0.2 now, closing.