Bug 470 - Latest version reporting FORGED_RCVD_FOUND in error
Summary: Latest version reporting FORGED_RCVD_FOUND in error
Status: RESOLVED WONTFIX
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 2.30
Hardware: PC Linux
: P2 minor
Target Milestone: ---
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-06-18 07:08 UTC by Mike Bostock
Modified: 2002-06-18 02:53 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mike Bostock 2002-06-18 07:08:21 UTC 
With V 2.20 the tags FORGED_RCVD_FOUND and MSG_ID_ADDED_BY_MTA_2 did not appear 
in messages sent to myself

In V 2.30 these tags are being added.

Return-Path: <mike@domain.co.uk>
Received: (from uucp@localhost)
	by domain.co.uk (8.11.5/8.11.5) id g5IDLW003486
	for mike@foo.co.uk; Tue, 18 Jun 2002 14:21:32 +0100
Content-Type: text/plain; charset="us-ascii"
Date: Tue, 18 Jun 2002 14:21:10 +0100
From: "Mike Bostock" <mike@domain.co.uk>
Message-ID: <200261813211186458856@surgery1.domain.co.uk>
MIME-Version: 1.0
Received: from surgery1
	by wistaria.co.uk (AvMailGate-2.0.0.5) id 03481-551AD062;
	Tue, 18 Jun 2002 14:21:11 +0100
Reply-To: "Mike Bostock" <mike@domain.co.uk>
Subject: Test
To: "Mike Bostock" <mike@domain.co.uk>
X-AntiVirus: OK! AntiVir MailGate Version 2.0.0.5
	 at domain.co.uk has not found any known virus in this email.
X-Mailer: NetcMail - V5.02 3rd April 2002 Serial Number 23481BE5
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by domain.co.uk id 
g5IDLW003486
X-Spam-Status: No, hits=0.2 required=5.0
	tests=FORGED_RCVD_FOUND,FROM_AND_TO_SAME,MSG_ID_ADDED_BY_MTA_2,
	      AWL
	version=2.30
X-Spam-Level: 
Status:
Comment 1 Daniel Quinlan 2002-06-18 10:53:26 UTC 
It looks like the rule is working.

Your email has a Received: header located below many of your headers.  That
often indicates that a spammer has forged one or more Received: header.  MUAs
should not be adding Received: headers.

In addition, the Message-ID: also appears above a Received: header which usually
indicates spam as well.

Finally, it did not actually mark your message as spam.  The score was only 0.2.

Sometimes, a site with an odd configuration has to change the score for a rule
to 0.0 to deactivate a rule.  Feel free to do that as well.