The following message (headers below) was tagged as spam. It is not. What
I don't understand is why does it say yahoo.com is a forged address and
via a tagged relay?
I assume this person has an AOL account and sent mail from Yahoo.
>From [EMAIL PROTECTED] Tue Apr 23 23:13:39 2002
Received: from rly-ip02.mx.aol.com (rly-ip02.mx.aol.com [152.163.225.160])
by marconi.crompton.com (8.10.0/8.10.0) with ESMTP id g3NKeqQ17805
for <[EMAIL PROTECTED]>; Tue, 23 Apr 2002 16:40:56 -0400
Received: from logs-wc.proxy.aol.com (logs-wc.proxy.aol.com [205.188.193.5])
by rly-ip02.mx.aol.com (8.8.8/8.8.8/AOL-5.0.0)
with ESMTP id QAA28348 for <[EMAIL PROTECTED]>;
Tue, 23 Apr 2002 16:37:19 -0400 (EDT)
Received: from lindadalyasid (AC87722C.ipt.aol.com [172.135.114.44])
by logs-wc.proxy.aol.com (8.10.0/8.10.0) with SMTP id g3NK3uu507147
for <[EMAIL PROTECTED]>; Tue, 23 Apr 2002 16:03:56 -0400 (EDT)
Message-ID: <000b01c1eae8$6950cda0$2c7287ac@lindadalyasid>
From: "Linda Daly ASID" <[EMAIL PROTECTED]>
To: "Doug Crompton" <[EMAIL PROTECTED]>
Subject: *****SPAM***** NTHS March Minutes
Date: Tue, 23 Apr 2002 13:00:41 -0400
MIME-Version: 1.0
Content-Type: text/plain
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2615.200
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
X-Apparently-From: [EMAIL PROTECTED]
X-Spam-Status: Yes, hits=6.2 required=4.9 tests=LINES_OF_YELLING,SUPERLONG_LINE,
BIG_FONT,FORGED_YAHOO_RCVD,RCVD_IN_OSIRUSOFT_COM version=2.20
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Checker-Version: SpamAssassin 2.20 (devel $Id: SpamAssassin.pm,
v 1.77 2002/04/06 19:28:30 hughescr Exp $)
X-Spam-Prev-Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C1EAC6.DF65CEE0"
SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (6.2 hits, 4.9 required)
SPAM: Hit! (0.5 points) BODY: A WHOLE LINE OF YELLING DETECTED
SPAM: Hit! (-0.4 points) BODY: Contains a line >=199 characters long
SPAM: Hit! (2.1 points) BODY: FONT Size +2 and up or 3 and up
SPAM: Hit! (2.0 points) Forged yahoo.com 'Received:' header found
SPAM: Hit! (2.0 points) Received via a relay in relays.osirusoft.com
SPAM: [RBL check: found 44.114.135.172.relays.osirusoft.com.]
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
This is a multi-part message in MIME format.
Message text deleted
****************************
* Doug Crompton *
* Richboro, PA 18954 *
* 215-431-6307 *
* *
* [EMAIL PROTECTED] *
* [EMAIL PROTECTED] *
* http://www.crompton.com *
****************************
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
