SA Bugzilla – Bug 5774
__ANY_OUTLOOK_MUA and X-Mailer: Microsoft Office Outlook
Last modified: 2011-05-31 22:27:06 UTC
Hi there. The definition of __ANY_OUTLOOK_MUA is header __ANY_OUTLOOK_MUA X-Mailer =~ /^Microsoft Outlook\b/ But I've been seeing a lot of ham and spam with X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-Mailer: Microsoft Office Outlook 12.0 (and other numbers). Should the rule be updated so it matches both formats? Thanks, James.
I'll add in my 5cents here too. I just found the same thing. How about redefining as: header __ANY_OUTLOOK_MUA X-Mailer =~ /^Microsoft (Office|) Outlook\b/
Jason, there's a space too much in your rule, preventing all previously detected 'Microsoft Outlook' matches. ;) The rule below will work. header __ANY_OUTLOOK_MUA X-Mailer =~ /^Microsoft (Office )?Outlook\b/ Oh, and yes, I have seen this in my spam, too. About 25% as of some Jan corpus checks. This seems to be a bug.
fixed: : jm 154...; svn commit -m "bug 5774: __ANY_OUTLOOK_MUA needs to match new format for Outlook X-Mailer strings; 'Microsoft Office Outlook'" rules/20_ratware.cf Sending rules/20_ratware.cf Transmitting file data . Committed revision 629810.
could this be pushed to SA updates?
reaiming for possible update, if anyone has the tuits
Close. Fix committed to trunk before 3.3 was branched from trunk. Last updated 1.8 years ago.
Fixed prior to 3.3