Can anyone tell me why this did not get tagged? It clearly states that the date is thursday jan 01. Does the date header
not get checked?
Mairhtin
I believe that SA does not look for a date in the future relative to the current local system time, it looks for the best-case difference relative to the date/time in the Received headers...
Received: from [64.108.195.217] by 2004hosting.netIP with HTTP;
Fri, 02 Jan 2004 01:28:16 +0300
This particular Received header is ahead of the date header, making the rule not match.
Date: Thu, 01 Jan 2004 16:29:16 -0600
And those two dates are really only one minute appart.. (both are Thursday 22:2x in GMT)
It's an obvious forgery to evade the rule, but that's exactly what happened.
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
