[tech] Problem with KAS and SpamAssassin

David Basden davidb at ucc.asn.au
Wed Dec 15 10:43:33 WST 2004


Could you please send on all the message headers? Also, if you have
them, and it's very definately a trusted source, headers from
other messages sent by the same mailer?

It's not just looking at X-Mailer, it's looking at quite a few 
different headers, and checking that they are the same as generated
by specific versions of OE.[0] There seems to be spam mailers that
make small errors in the headers that wouldn't be made by OE.

Cheers,

David


[0] mooneye:/usr/share/spamassassin/20_ratware.cf (lines 115-134)


On Mon, Dec 13, 2004 at 10:24:11PM +0800, Alastair Irvine wrote:
> Howdy.  I have received a known-good message that both KAS* and
> SpamAssassin (FORGED_MUA_OUTLOOK) think is bad.  From the header:
> 
>   X-Mailer: Microsoft Outlook Express 6.00.2800.1437
> 
> * X-SpamTest-Info: {X-Mailer: forged OE}
> 
> -- 
> ... Work comebacks #15: I'm really easy to get along with once you people
>     learn to worship me.
>  _____________________________________________________________________ 
> |                                                                     |
> |  -=*Alastair Irvine*=-   <http://www.ucc.gu.uwa.edu.au/~alastair/>  |
> |  C-monkey/wanderer/board&RPGer/net-nut  alastair at ucc.gu.uwa.edu.au  |
> |_____________________________________________________________________|



More information about the tech mailing list