Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SpamAssassin: devel

[Bug 5910] New: FORGED_MUA_OUTLOOK FP with recent outlook express

 

 

SpamAssassin devel RSS feed   Index | Next | Previous | View Threaded


bugzilla-daemon at bugzilla

May 18, 2008, 12:31 PM

Post #1 of 1 (88 views)
Permalink
[Bug 5910] New: FORGED_MUA_OUTLOOK FP with recent outlook express

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5910

Summary: FORGED_MUA_OUTLOOK FP with recent outlook express
Product: Spamassassin
Version: 3.2.4
Platform: All
OS/Version: All
Status: NEW
Severity: major
Priority: P5
Component: Rules
AssignedTo: dev[at]spamassassin.apache.org
ReportedBy: mouss[at]netoyen.net


Created an attachment (id=4320)
--> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4320)
sample message posted from OE (on windows xp SP3)

after installing SP3 on windows XP and using outlook express, the generated
message-id has a new form which causes an FP because it does not match any of
the __OE_MSGID_n in 20_ratware.cf.

Here are few samples of the new message-id:

Message-ID: <EBA01EA8F94B44DF9A6858D7984DE11B[at]DADES>
Message-ID: <F24215C0DAF84794BCFC66C81A6E1751[at]mosquito>
Message-ID: <74BC081D12754719AD817A909757BB09[at]server>


according to the samples, the message-id is formed by 32 hex chars before
follow by @host, where 'host' is the (netbios) machine name.

a fix would be to add

header __OE_MSGID_5 MESSAGEID =~ /^<[A-Fa-f0-9]{32}\@[\-A-Za-z0-9]+$/m

and to include this in the definition of __FORGED_OE:

meta __FORGED_OE (__OE_MUA && !__OE_MSGID_1 && !__OE_MSGID_2 &&
!__OE_MSGID_3 && !__OE_MSGID_4 && !__OE_MSGID_5 && !__UNUSABLE_MSGID)


--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

SpamAssassin devel RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.