On Sun, 30 Apr 2017, Alex wrote:

Hi, is it possible hotmail is now using outlook.com to route and
process their email? Or perhaps this user is using outlook to send
their hotmail mail? If so, I believe the FORGED_HOTMAIL_RCVD2 rule is
not considering this possibility.

That's entirely possible. I'm pretty sure I've seen messages purporting to be from a hotmail user that were processed by outlook.com. I'll check my corpora and see if I can confirm that.



--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  You are in a maze of twisty little protocols,
  all written by Microsoft.
----------------------------------------------------------------------
 8 days until the 72nd anniversary of VE day

Reply via email to