[tech] Problem with KAS and SpamAssassin
David Luyer
david_luyer at pacific.net.au
Wed Dec 15 11:04:42 WST 2004
Specifically if it is OE 6 as indicated, it should have one of these
two message IDs patterns:
/^<[A-Za-z0-9-]{7}[A-Za-z0-9]{20}\@hotmail\.com>$/m
/^<(?:[0-9a-f]{8}|[0-9a-f]{12})\$[0-9a-f]{8}\$[0-9a-f]{8}\@\S+>$/m
This is unless the message-ID has been nuked by software known to
nuke message-IDs, for example mail received via Lyris, ezmlm and
iPlanet, or particularly old mail.
David.
> -----Original Message-----
> From: tech-bounces at ucc.gu.uwa.edu.au [mailto:tech-
> bounces at ucc.gu.uwa.edu.au] On Behalf Of David Basden
> Sent: Wednesday, 15 December 2004 1:44 PM
> To: Alastair Irvine
> Cc: tech at ucc.gu.uwa.edu.au
> Subject: Re: [tech] Problem with KAS and SpamAssassin
>
> Could you please send on all the message headers? Also, if you have
> them, and it's very definately a trusted source, headers from
> other messages sent by the same mailer?
>
> It's not just looking at X-Mailer, it's looking at quite a few
> different headers, and checking that they are the same as generated
> by specific versions of OE.[0] There seems to be spam mailers that
> make small errors in the headers that wouldn't be made by OE.
>
> Cheers,
>
> David
>
>
> [0] mooneye:/usr/share/spamassassin/20_ratware.cf (lines 115-134)
>
>
> On Mon, Dec 13, 2004 at 10:24:11PM +0800, Alastair Irvine wrote:
> > Howdy. I have received a known-good message that both KAS* and
> > SpamAssassin (FORGED_MUA_OUTLOOK) think is bad. From the header:
> >
> > X-Mailer: Microsoft Outlook Express 6.00.2800.1437
> >
> > * X-SpamTest-Info: {X-Mailer: forged OE}
> >
> > --
> > ... Work comebacks #15: I'm really easy to get along with once you
> people
> > learn to worship me.
> >
_____________________________________________________________________
> > |
|
> > | -=*Alastair Irvine*=- <http://www.ucc.gu.uwa.edu.au/~alastair/>
|
> > | C-monkey/wanderer/board&RPGer/net-nut alastair at ucc.gu.uwa.edu.au
|
> >
|_____________________________________________________________________|
>
More information about the tech
mailing list