Bug 6175 - false positive- FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Summary: false positive- FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Status: RESOLVED WORKSFORME
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: spamassassin (show other bugs)
Version: unspecified
Hardware: Other All
: P5 blocker
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-08-09 11:47 UTC by edbeards
Modified: 2010-05-25 17:06 UTC (History)
1 user (show)


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description edbeards 2009-08-09 11:47:55 UTC 
So few false positives, SA is great.  Occasionally, however, I almost lose one from this...emails from legit senders.

===========
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
	va1-sg00015.securesites.net
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.7 required=5.0 tests=AWL,FORGED_MUA_OUTLOOK,
	FORGED_OUTLOOK_HTML,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_MID,MISSING_MIMEOLE,
	RCVD_IN_PBL,RDNS_NONE,SPF_NEUTRAL autolearn=disabled version=3.2.4
X-Spam-Report: 
	*  0.0 MISSING_MID Missing Message-Id: header
	*  1.2 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
	*  0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
	*      [189.101.84.1 listed in zen.spamhaus.org]
	*  0.0 HTML_MESSAGE BODY: HTML included in message
	*  1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
	*  0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
	*  0.0 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
	*  0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
	*  4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
	* -0.0 AWL AWL: From: address is in the auto white-list
Comment 1 Sidney Markowitz 2010-05-25 17:06:37 UTC 
I'm closing as Works For Me because it is an old bug, without enough information to diagnose what the problem is, either not a bug or an old problem with FORGED_MUA_OUTLOOK FPs. It is likely to be s duplicate of something that has already been addressed and if it isn't then there is no way to deal with it without the full set of headers from the original FP message.