Re: FORGED_YAHOO_RCVD still causing false positives

2017-09-18 Thread Dan Malm
On 09/15/2017 02:26 PM, RW wrote: > On Fri, 15 Sep 2017 11:50:25 +0100 > Sebastian Arcus wrote: > >> I see this has come up again and again. Since FORGED_YAHOO_RCVD seems >> to work by checking the address of the Yahoo smtp server in the >> headers against a predefined list of Yahoo servers in SA,

Re: FORGED_YAHOO_RCVD still causing false positives

2017-09-15 Thread Alex
Hi, On Fri, Sep 15, 2017 at 9:34 AM, Kevin A. McGrail wrote: > On 9/15/2017 8:26 AM, RW wrote: >> >> The rule was created and scored when spoofing Yahoo was very common, >> but it isn't any more. I don't think it's worth keeping as it is - high >> maintenance and error prone. > > > Agreed. Score

Re: FORGED_YAHOO_RCVD still causing false positives

2017-09-15 Thread Sebastian Arcus
On 15/09/17 14:34, Kevin A. McGrail wrote: On 9/15/2017 8:26 AM, RW wrote: The rule was created and scored when spoofing Yahoo was very common, but it isn't any more. I don't think it's worth keeping as it is - high maintenance and error prone. Agreed.  Score FORGED_YAHOO_RCVD to zero locally

Re: FORGED_YAHOO_RCVD still causing false positives

2017-09-15 Thread Kevin A. McGrail
On 9/15/2017 8:26 AM, RW wrote: The rule was created and scored when spoofing Yahoo was very common, but it isn't any more. I don't think it's worth keeping as it is - high maintenance and error prone. Agreed.  Score FORGED_YAHOO_RCVD to zero locally and will get a bug open to deprecate it.

Re: FORGED_YAHOO_RCVD still causing false positives

2017-09-15 Thread RW
On Fri, 15 Sep 2017 11:50:25 +0100 Sebastian Arcus wrote: > I see this has come up again and again. Since FORGED_YAHOO_RCVD seems > to work by checking the address of the Yahoo smtp server in the > headers against a predefined list of Yahoo servers in SA, and Yahoo > seems to add new servers all t

Re: FORGED_YAHOO_RCVD

2008-01-02 Thread Randy Ramsdell
Loren Wilton wrote: Ok thanks turning it off works. I should edit the *.cf files or is there another way to turn it off instead of settings things up so updates kill off the setting? Anyway, I would think the rule is useful to some extent and if not, why is it included with spamassassin? Put

Re: FORGED_YAHOO_RCVD

2008-01-02 Thread Loren Wilton
Ok thanks turning it off works. I should edit the *.cf files or is there another way to turn it off instead of settings things up so updates kill off the setting? Anyway, I would think the rule is useful to some extent and if not, why is it included with spamassassin? Put it in local.cf. That

Re: FORGED_YAHOO_RCVD

2008-01-02 Thread Randy Ramsdell
Loren Wilton wrote: score FORGED_YAHOO_RCVD 0 Loren Ok thanks turning it off works. I should edit the *.cf files or is there another way to turn it off instead of settings things up so updates kill off the setting? Anyway, I would think the rule is useful to some extent and if not, w

Re: FORGED_YAHOO_RCVD

2008-01-02 Thread Loren Wilton
score FORGED_YAHOO_RCVD 0 Loren

Re: FORGED_YAHOO_RCVD?

2006-09-27 Thread Matt Kettler
What's your trusted_networks look like? Based on the headers below you'll need to set it manually. By default SA assumes that all the "private range" hosts are part of your network, and the first non-private. However, in this case, the first non-private is yahoo's server. That's bad. Jim Davis

Re: FORGED_YAHOO_RCVD

2006-09-14 Thread John D. Hardin
On Thu, 14 Sep 2006, Ben Wylie wrote: > The FORGED_YAHOO_RCVD rule seems to hit falsely. > I am using SpamAssassin 3.1.2 on Windows 2003 Server. > > Can anyone see why the following headers hit this rule? > The email was a genuine yahoo email from a friend telling me about a > photo album he had

Re: FORGED_YAHOO_RCVD false positive

2005-06-15 Thread Matt Kettler
jdow wrote: > It also seems the diff listed is the wrong direction: > 502d501 < if ($rcvd =~ /by web\S+\.mail\.mud\.yahoo\.com via HTTP/) { return > 0; } > > That line does not exist to be removed. Looking at the code it is already implemented in 3.0.4, so if you're diffing against that, well, yo

Re: FORGED_YAHOO_RCVD false positive

2005-06-15 Thread jdow
t; <[EMAIL PROTECTED]>; Sent: 2005 June, 15, Wednesday 07:50 Subject: Re: FORGED_YAHOO_RCVD false positive > At 04:09 AM 6/15/2005, Monty Ree wrote: > >Hello, all. > > > >I have an account at yahoo.com and sent a mail to SA 3.0.x server at > >mail.yahoo.com site. &g

Re: FORGED_YAHOO_RCVD false positive

2005-06-15 Thread jdow
My - that diff for the fix is useful - no context at all for it. {+_+} - Original Message - From: "Matt Kettler" <[EMAIL PROTECTED]> > At 04:09 AM 6/15/2005, Monty Ree wrote: > >Hello, all. > > > >I have an account at yahoo.com and sent a mail to SA 3.0.x server at > >mail.yahoo.com site

Re: FORGED_YAHOO_RCVD false positive

2005-06-15 Thread Stuart Johnston
Monty Ree wrote: > Hello, all. > > I have an account at yahoo.com and sent a mail to SA 3.0.x server at > mail.yahoo.com site. > But I have found that this legel mail was spam tagging and my header > says that it was "FORGED_YAHOO_RCVD" violation. > > Anyone who uses mail.yahoo.com? please test

Re: FORGED_YAHOO_RCVD false positive

2005-06-15 Thread Matt Kettler
At 04:09 AM 6/15/2005, Monty Ree wrote: Hello, all. I have an account at yahoo.com and sent a mail to SA 3.0.x server at mail.yahoo.com site. But I have found that this legel mail was spam tagging and my header says that it was "FORGED_YAHOO_RCVD" violation. Anyone who uses mail.yahoo.com? p