On Fri, Jan 18, 2002 at 11:38:48PM -0500, dman wrote: > On Fri, Jan 18, 2002 at 11:22:30PM -0500, Jason Kohles wrote: > | On Fri, Jan 18, 2002 at 11:20:29PM -0500, dman wrote: > | > > | > A legit message triggered the > | > FROM_FORGED_HOTMAIL > | > test. The header is > | > From: Linda Macdonald <[EMAIL PROTECTED]> > | > > | > What properites of it make you think it is forged? The test appears > | > to match any hotmail address, legit or not (though I don't really know > | > what the "=~" operator does). > | > | You need to look at the whole test, > > Where can I find the rest of the test? The spamassassin.cf file I > have says: > > header FROM_FORGED_HOTMAIL From =~ /^[^"]+\S+\@hotmail\.com/i > describe FROM_FORGED_HOTMAIL Forged From: line claiming to be from hotmail.com > score FROM_FORGED_HOTMAIL 3.0 > Oops, this isn't the recently discussed hotmail test that has been on the list today. Ignore me, this is a test that I have removed from my own configuration because of false positives, I thought you were talking about the originating-ip test that was being discussed at the same time.
-- Jason Kohles [EMAIL PROTECTED] Senior System Architect (703)786-8036 (cellular) Red Hat Professional Consulting (703)456-2940 (office) _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
