Bug 6349 - fp on HK_FAKENAME_MICROSOFT
Summary: fp on HK_FAKENAME_MICROSOFT
Status: RESOLVED FIXED
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 3.3.0
Hardware: Other All
: P5 major
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-02-25 20:29 UTC by Michael Scheidell
Modified: 2010-02-25 20:44 UTC (History)
1 user (show)


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Scheidell 2010-02-25 20:29:29 UTC 
since the score is SO high, (and should be easy to fix on next sa-update) I maked this major

fp on HK_FAKENAME_MICROSOFT
(God Bless microsoft for coming up with spammy sounding domain names for their mailing lists)
spf and dkim pass, whois shows its owned by ms.

x-envelope-from:<bounce-866153_TEXT-334840209-46108-98449-1335@bounce.email.microsoftemail.com>

received:from mta12.email.microsoftemail.com (mta12.email.microsoftemail.com dkim-signature:v=1; a=rsa-sha1; c=relaxed/relaxed; s=200608; d=e-mail.microsoft.com; h=From:To:Subject:Date:MIME-Version:Reply-To:Message-ID:Content-Type:Content-Transfer-Encoding; i=Microsoft@e-mail.microsoft.com; bh=+PuEC46z4obZ2tOn6rfbOvdEnf4=; b=G0wodS0T9poBPDAZxF7WEZ938Ym3ub+8TTD7Lkh4QY1oMMajBscExZ9ILsHOg7betk0b+Kr0aoOU d18FRoXfOGfM8lJiRN1FKh4HFHen6QpO5QFQ4NX85dnyU/3B7QXtJt+S2zpemGU0SXh1vCrfXZi9 Ih2OXHR0dWbx0lrxF60=
from:"Microsoft" <Microsoft@e-mail.microsoft.com>

suggested fix, 72_active.cf

was:
header		__HK_HELO_MICROSOFT	X-Spam-Relays-External =~ / helo=\S+\.(?:microsoft|msn)\.com /

sb
header		__HK_HELO_MICROSOFT	X-Spam-Relays-External =~ / helo=\S+\.(?:microsoft|msn|microsoftemail)\.com /
Comment 1 Henrik Krohns 2010-02-25 20:44:48 UTC 
Thanks, applied the quick fix to my sandbox rule, guess it should end up in sa-update soon.

(Mental note to self: try to review my sandbox someday)