OK, I figured it out. It happens when someone uses Yahoo! Mail to send
something to Yahoo! Groups. The "received" for Yahoo! Groups looks like:
> Received: from [216.115.97.190] by n22.groups.yahoo.com with NNFMP; 02 Mar
> 2002 03:35:46 -0000
Here's a patch that should recognize this.
Index: lib/Mail/SpamAssassin/EvalTests.pm
===================================================================
RCS file:
/cvsroot/spamassassin/spamassassin/lib/Mail/SpamAssassin/EvalTests.pm,v
retrieving revision 1.106
diff -u -3 -p -r1.106 EvalTests.pm
--- lib/Mail/SpamAssassin/EvalTests.pm 20 Feb 2002 03:13:20 -0000 1.106
+++ lib/Mail/SpamAssassin/EvalTests.pm 2 Mar 2002 09:04:14 -0000
@@ -207,6 +207,10 @@ sub check_for_forged_yahoo_received_head
if ($rcvd =~ /by web\S+\.mail\.yahoo\.com via HTTP/) { return 0; }
if ($rcvd =~ /by smtp\.\S+\.yahoo\.com with SMTP/) { return 0; }
+ if ($rcvd =~
+ /from [\d+\.\d+\.\d+\.\d+] by \S+\.groups.yahoo.com with NNFMP/) {
+ return 0;
+ }
return 1;
}
--
http://dmoz.org | Give a man a match, and he'll be warm for a
| minute, but light him on fire, and he'll be
The world's largest human edited | warm for the rest of his life.
edited web directory directory | ICQ: 132152059
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
