Bug 6038 - False negative
Summary: False negative
Status: RESOLVED WORKSFORME
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: spamassassin (show other bugs)
Version: 3.2.5
Hardware: PC FreeBSD
: P5 trivial
Target Milestone: 3.2.5
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-12-28 05:13 UTC by Sergey
Modified: 2008-12-28 05:40 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sergey 2008-12-28 05:13:30 UTC 
Some spammers make score down...
i don`t know how: (look at score -79.0)
See it:

Received: by m22.z00f.ru (mbox chipline_kss)
 (with Cubic Circle's cucipop (v1.31 1998/05/13) Sun Dec 28 15:25:07 2008)
X-From_: order@chipline.ru Sun Dec 28 13:04:18 2008
Return-Path: <order@chipline.ru>
Received: from amateurmatch.com (dsl88.242-33718.ttnet.net.tr [88.242.131.182] (may be forged))
        by m22.z00f.ru (8.14.3/8.14.3) with SMTP id mBSA4CkG009669
        for <order@chipline.ru>; Sun, 28 Dec 2008 13:04:16 +0300 (MSK)
        (envelope-from order@chipline.ru)
Date: Sun, 28 Dec 2008 13:04:12 +0300 (MSK)
Message-Id: <200812281004.mBSA4CkG009669@m22.z00f.ru>
To: <order@chipline.ru>
Subject: Don't go home now!
From: <order@chipline.ru>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-Spam-Status: No, score=-79.0 required=4.0 tests=HTML_IMAGE_ONLY_04,
        HTML_MESSAGE,HTML_SHORT_LINK_IMG_1,MIME_HTML_ONLY,MISSING_DATE,MISSING_MID,
        RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_NONE,
        URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_RHS_DOB,
        USER_IN_WHITELIST autolearn=no version=3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on m22.z00f.ru
X-Virus-Scanned: ClamAV 0.94.1/8804/Sun Dec 28 06:13:10 2008 on m22.z00f.ru
X-Virus-Status: Clean
Comment 1 Sidney Markowitz 2008-12-28 05:40:41 UTC 
(I changed the summary from 'x'. Please use a summary that makes sense when submitting a bug)

It looks like you have a whitelist_from entry in your configuration for your own email address. That is not a good idea, as spammers often use your email address in both the From and To just to make this happen. That triggered the USER_IN_WHITELIST rule for -100 points. Without that this spam would have had a whopping 21 point score.

If you are really in the habit of sending yourself email, then use whilelist_from_rcvd instead of whitelist_from so that it only triggers when it is from your email address sent through the mail server that you use for outgoing mail. i.e., when it really is from you.

I'm closing this bug as WORKSFORME