SPAMCOP HOME · SPAMCOP FAQ · NEWSGROUPS · FORUM FAQ · WEBMAIL · SSL WEBMAIL · SPAMCOPWIKI


 Other words, data, places -->  SpamCop Pages V  FAQs & Words V  Newsgroups V  WebMail V  News-Recent Stuff V   Poll on menu

------>------> Latest and Current Announcements <------<------

Welcome Guest ( Log In | Register )

> This is a User to User Support Forum

The primary mode of support here is peer-to-peer, meaning users helping other users. (please remember this at all times!)
Another try:
This forum is composed of people who have used spamcop and those who are learning about anti-spam efforts.

 
Reply to this topicStart new topic
> SpamAssassin confused about AOL webmail messages, "FORGED_AOL_TAGS" -- but not really
DavidT
post Oct 11 2007, 11:06 AM
Post #1


Been There
Group Icon

Group: Memberp
Posts: 2186
Joined: 28-January 04
Member No.: 63



To other uses, but primarily to Trevor:

There's a known SpamAssassin bug that's increasing the spam scoring on messages received by SC email customers from AOL's webmail system. For example, from the headers of a message I sent directly from AOL webmail to my SC email address:

X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on filter7
X-Spam-Level: *
X-Spam-Status: hits=1.8 tests=FORGED_AOL_TAGS,HTML_MESSAGE version=3.2.3

Since the "Spam-Status" line doesn't contain the individual scoring values, I found plenty of other messages in my inbox with only this:

X-Spam-Status: hits=0.0 tests=HTML_MESSAGE version=3.2.3

so it's clear that the "FORGED_AOL_TAGS" is responsible for the entire value of 1.8 and the "HTML_MESSAGE" hit is configured not to affect the score. I googled:

FORGED_AOL_TAGS webmail

and came up with multiple hits of people reporting this as a long-unresolved SA bug, and also saw admins recommending that until someone actually fixes this SA bug, that this SA test should be zeroed out, by adding:

score FORGED_AOL_TAGS 0

to the "local.cf" file on the server. Trevor, please do that ASAP, because a false bump of 1.8 to the SA score of an innocent message is significant, possibly sending it above the user's defined SA threshhold.

Interestingly enough, I've also seen this same behavior on mail that passes through a Barracuda Spam Firewall, so the Barracuda folks haven't addressed this issue, either.

Peace,
DT

This post has been edited by DavidT: Oct 11 2007, 11:07 AM
User is offlineProfile CardPM
Go to the top of the page
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

- Lo-Fi Version Time is now: 23rd April 2014 - 11:38 PM