IMHO SpamAssassins rule should be oriented to things ALWAYS found in spam, or should have exceptions to compensate.
As for this issue Forged_Juno_Rcvd shouldn't be so high, or should be counteracted if a signature from Juno is also found in the email.
Debbie D wrote:
My step son just signed up for Juno and all his mails are coming in marked as spam with a slew of rules broken: X-Spam-Status: Yes, hits=7.9 required=6.0 tests=FORGED_JUNO_RCVD,FORGED_RCVD_FOUND,FORGED_RCVD_TRAIL, FROM_ENDS_IN_NUMS,NO_REAL_NAME,ONLY_COST,SPAM_PHRASE_00_01, SUBJ_MISSINGIn looking at the full headers I see the FORGED_RCVD_TRAIL and FORGED_JUNO_RCVD are a result of the fact Netzero evidently owns Juno and the mail is coming off netzero servers.. Now add in the Juno footer in the mail, the fact the kid neglected to type a subject and I will not even share the nonsense he typed as the body in this test mail <G> I also signed up for a free Juno account so I could help him work the webmail there.. and today I received a mail from their support team reminding me that if I wanted to jump to the Premium version it costs.. and please click here.. This mail was also marked as spam. The headers in both mails are different as one was a web based email the other coming from the offices.. So I believe that a rule needs to be added that reduces the score on a legit Juno mail.. Can someone help me out here?? Here are the headers from the 2 mails: Thanks.. Debbie web mail (scored 7.9): Return-Path: <[EMAIL PROTECTED]> Received: from webmail1.wlv.untd.com (outbound-16.wlv.untd.com [64.136.16.100]) by www.wwwebserv.com (8.10.2/8.10.2) with SMTP id h0RHkrR25452 for <[EMAIL PROTECTED]>; Mon, 27 Jan 2003 12:46:53 -0500 Received: from cookie.juno.com by cookie.juno.com for <"2lfT/unMyoj0mPaXqnFzIVJXEEy8pjV0rAuEdf3WhnTAmM+rt/Mim58nzesdqWzn"> Received: (from [EMAIL PROTECTED]) by webmail1.wlv.untd.com (jqueuemail) id HPJ25UHC; Mon, 27 Jan 2003 09:48:36 PST X-Original-From: [EMAIL PROTECTED] Date: Mon, 27 Jan 2003 17:47:48 GMT To: [EMAIL PROTECTED] Cc: Subject: *****SPAM***** X-Mailer: Juno Webmail Version 1.0 Received: from [137.123.201.141] by webmail1.wlv.untd.com X-Originating-IP: [137.123.201.141] From: [EMAIL PROTECTED] Message-Id: <[EMAIL PROTECTED]> ============================== from Juno support (scored 9.9) Return-Path: <[EMAIL PROTECTED]> Received: from nc1.wlv.netzero.net (nc1.wlv.netzero.net [209.247.163.78]) by www.wwwebserv.com (8.10.2/8.10.2) with SMTP id h0SHGKR09115 for <[EMAIL PROTECTED]>; Tue, 28 Jan 2003 12:16:20 -0500 Received: (qmail 91023 invoked by uid 0); 28 Jan 2003 17:04:59 -0000 Date: 28 Jan 2003 17:04:59 -0000 Message-ID: <[EMAIL PROTECTED]> From: Juno Member Services <[EMAIL PROTECTED]> Reply-To: Juno <[EMAIL PROTECTED]> Errors-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
smime.p7s
Description: S/MIME Cryptographic Signature