At Tue Nov  4 02:10:56 2003, Mairhtin O'Feannag wrote:
> 
> Hi,
> 
> The "tests" page of the spamassassin.org website seems not to be too
> up-to-date.  A search of the page reveals only three or four tests
> based upon the word "outlook" and they all refer to Outlook Express.
> YET ... when I get a message in as spam, it has failed the following
> tests :
> 
> X-Spam-Status: Yes, hits=7.4 required=5.0
>       tests=FORGED_MUA_OUTLOOK,HTML_70_80,HTML_FONT_COLOR_NAME,
>             HTML_MESSAGE,MISSING_OUTLOOK_NAME,MSG_ID_ADDED_BY_MTA_2,
>             NORMAL_HTTP_TO_IP
>       version=2.53
> 
> which clearly indicates the tests : ORGED_MUA_OUTLOOK ,
> MISSING_OUTLOOK_NAME ...... What gives?

I have a suspicion that the site may list "normal" rules, and not the
ones that use "meta". 

> I know I should be at version 2.6, but this is a production server
> and I need to schedule the upgrade, which could take a week or so.
> 
> I'm told by the users that have the problem that they are on the new
> Outlook 2003, wich is what is causing this.  Yet I cannot see any
> tests on the spamassassin site ?????

This is a known bug, present in 2.60.  The problem is that Outlook
2003 no longer generates its own Message-ID, relying on the MTA to
generate one.  This means that you can no longer compare the
X-Mailer/User-Agent header with the format of the Message-ID.  I can't
currently spot the bug in bugzilla -- it might have been fixed for
future versions.

The fix, I think is to detect Outlook 2003, and remove it from the
expression used to generate the FORGED_MUA_OUTLOOK rule.

I'm hoping to find some time to look at this tomorrow.

> I could just lower the Outlook related tests' scores, but that would
> let a lot of spam through.

That would fix the problem in the short term.

Martin
-- 
Martin Radford              |   "Only wimps use tape backup: _real_ 
[EMAIL PROTECTED] | men just upload their important stuff  -o)
Registered Linux user #9257 |  on ftp and let the rest of the world  /\\
- see http://counter.li.org |       mirror it ;)"  - Linus Torvalds _\_V


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to