Greetings, I have received the following headers from a message from an Ebay purchaser, and am not sure why the GENUINE_EBAY_RCVD trigger wasn't Hit. Here they are:
| Return-Path: <[EMAIL PROTECTED]> | Received: from intrepid.marinar.com by webslayer.marinar.com | (8.9.3/8.9.3) | id GAA14176; Mon, 9 Dec 2002 06:22:05 -0500 | From: [EMAIL PROTECTED] | Received: from mail by intrepid.marinar.com with spam-scanned (Exim | 3.35 #1 | (Debian)) | id 18LLzA-0003tM-00 | for <[EMAIL PROTECTED]>; Mon, 09 Dec 2002 06:22:05 -0500 | Received: from mxpool07.ebay.com ([66.135.197.13] | helo=mx14.sjc.ebay.com) | by intrepid.marinar.com with esmtp (Exim 3.35 #1 (Debian)) | id 18LLzA-0003pv-00 | for <[EMAIL PROTECTED]>; Mon, 09 Dec 2002 06:22:04 -0500 | Received: from walkietalkie.sjc.ebay.com (walkietalkie.sjc.ebay.com | [10.6.60.42]) | by mx14.sjc.ebay.com (8.12.3/8.12.3) with SMTP id | gB9BLVhi026884 | for <[EMAIL PROTECTED]>; Mon, 9 Dec 2002 03:21:31 -0800 | Message-Id: <[EMAIL PROTECTED]> | To: [EMAIL PROTECTED] | MIME-Version: 1.0 | Content-Type: text/plain; charset="ISO-8859-1" | Subject: *****SPAM***** Question for seller -- Item #745888991 | Date: Mon, 09 Dec 2002 03:21:31 PST | X-Spam-Status: Yes, hits=7.6 required=5.0 | tests=FROM_HAS_MIXED_NUMS,Q_FOR_SELLER,NO_REAL_NAME,FORGED_YAHOO_RCVD,SUBJ_H | AS_UNIQ_ID version=2.20 | X-Spam-Flag: YES | X-Spam-Level: ******* | X-Spam-Checker-Version: SpamAssassin 2.20 (devel $Id: | SpamAssassin.pm,v 1.77 | 2002/04/06 19:28:30 hughescr Exp $) | X-Spam-Report: Detailed Report | SPAM: -------------------- Start SpamAssassin results | ---------------------- | SPAM: This mail is probably spam. The original message has been | altered | SPAM: so you can recognise or block similar unwanted mail in future. | SPAM: See http://spamassassin.org/tag/ for more details. | SPAM: | SPAM: Content analysis details: (7.6 hits, 5 required) | SPAM: Hit! (2.0 points) From: contains numbers mixed in with | letters | SPAM: Hit! (1.0 point) Subject is an eBay question | SPAM: Hit! (0.6 points) From: does not include a real name | SPAM: Hit! (2.0 points) Forged yahoo.com 'Received:' header found | SPAM: Hit! (2.0 points) Subject contains a unique ID number | SPAM: | SPAM: -------------------- End of SpamAssassin | results --------------------- | Status: | | -----Original Message----- | From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] | Sent: Monday, December 09, 2002 6:22 AM | To: [EMAIL PROTECTED] | Subject: *****SPAM***** Question for seller -- Item #745888991 Question becomes, how does one know if an email is genuinely from Ebay? Next question is, why do the following hostnames resolve to private-class IP (is this normal behavior?): mx14.sjc.ebay.com A 10.6.182.114 walkietalkie.sjc.ebay.com A 10.6.60.42 thanks much everyone, hank ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
