Re: False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-28 Thread Jolly ArrRoger
Message from user inside www.pair.com: >> Original message Apparently Yahoo has slightly changed the routing of groups messages: SA EvalTests.pm /from \[$IP_ADDRESS\] by \S+\.(?:groups|grp\.scd)\.yahoo\.com with NNFMP/ Received headers with NNFMP: from [66.218.69.1] by n22

Re: False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-27 Thread Jolly ArrRoger
a name that shows up in the headers that triggers the above rule somehow. (Of course, barring EXTREME emergencies it'd be easier to commit honorable seppuku than use web mail, IMAO. {^_-}) {^_^} - Original Message - From: "Jolly ArrRoger" <[EMAIL PROTECTED]> > Than

Re: False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-27 Thread Jolly ArrRoger
s backwards starting at the top. I see nothing there to inspire belief in the headers below the second "Received:" header. {^_^} ----- Original Message - From: "Jolly ArrRoger" <[EMAIL PROTECTED]> > > Can someone please explain why SA declares forgery on the atta

False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-27 Thread Jolly ArrRoger
Can someone please explain why SA declares forgery on the attached message? Seem to be getting an excessive number of false positives from legitimate yahoo.com email addresses that are delivered through YahooGroups.com. I've been "whitelisting" each one I find but wonder if there is a specific a