spamassassin-users October 2010 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: FORGED_HOTMAIL_RCVD2 contributing to FP

FORGED_HOTMAIL_RCVD2 contributing to FP

From: Kris Deugau <kdeugau_at_nospam>
Date: Mon Oct 04 2010 - 15:02:57 GMT
To: spamassassin-users <users@spamassassin.apache.org>

Not sure exactly what this test actually checks (since it's an eval rule
I gave up on tracing after the third layer of
"$self->callanotherfunction"), but it should not be triggering at all on
this set of Received: headers IMO:

Return-Path:
  <sports.gezdqnrrga4tkojq-xxxxxx=vianet.ca@returns.bulk.yahoo.com>
Received: from n1.bullet.mail.ac4.yahoo.com (n1.bullet.mail.ac4.yahoo.com
  [76.13.13.24]) by mx1.vianet.ca (Postfix) with SMTP id 116966E00FA for
  <xxxxxx@vianet.ca>; Sun, 3 Oct 2010 08:39:51 -0400 (EDT)
Received: from [76.13.13.25] by n1.bullet.mail.ac4.yahoo.com with NNFMP; 03
  Oct 2010 12:39:50 -0000
Received: from [98.136.139.32] by t4.bullet.mail.ac4.yahoo.com with
NNFMP; 03
  Oct 2010 12:39:50 -0000
Received: from [127.0.0.1] by fan181.sports.ac4.yahoo.com with NNFMP; 03 Oct
  2010 12:39:50 -0000
To: xxxxxx@vianet.ca
From: xxxxxx@hotmail.com
Reply-To: xxxxxx@hotmail.com
Subject: Join my Yahoo! Sports Fantasy Hockey league

The entire /16 is assigned to Yahoo!. I've zeroed the score for now.

-kgd