Sleepy-zz-John Posted April 26, 2008 Share Posted April 26, 2008 Hi, Mails from my genuine sender in Cyprus addressed to my virgin.net account are consistently getting a **** level and 4.2 hits from SpamAssasin, apparently from a false FORGED_MUA_OUTLOOK positive. I have whitelisted this genuine sender, so his messages no longer go into my Spamcop spam folder, but we are concerned that genuine sender's mails to other recipients are still liable to false blocking. I understand from looking at Spamassassin blogs that there have been some false positive FORGED_MUA_OUTLOOK issues in the past resulting from changes to the format of Outlook Express's Message ID that Spamassasin didn't recognise, but which are supposed to now be resolved. Note in the example below that cytanet first send genuine.sender's mail to emaildefenseservices.com who apparently do a rules hit check of their own on behalf of virgin.net. It then goes on to my virgin.net mailbox from whence Spamcop collect it (this latter part of the routing is not shown in my example). I have changed the names in the example below for security reasons, but the Message ID remains intact as sent. genuine.sender has sent me three seperate mails in the last few days, all with quite short innocuous text only bodies, and each time the result has shown exactly the same **** level, 4.2 hits, FORGED_MUA_OUTLOOK, and Blocked SpamAssassin=4 How can we stop this false blocking? ------EXAMPLE----- X-spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on filter7 X-spam-Level: **** X-spam-Status: hits=4.2 tests=FORGED_MUA_OUTLOOK version=3.2.4 Received: from sc1-in13.emaildefenseservice.com (22.214.171.124) by n024.sc1.he.tucows.com (7.2.069.1) id 47693081032C35B1 for sleepy.john[at]virgin.net; Sat, 26 Apr 2008 04:26:56 +0000 X-SpamScore: 2 X-Spamcatcher-Summary: 2,0,0,9f8b517d95129fa8,7e7d9b78463223a7,genuine.sender[at]cytanet.com.cy,-,RULES_HIT:355:379:539:540:541:542:543:567:728:988:989:1155:1260:1277:1311:1313:1314:1345:1437:1515:1516:1518:1533:1534:1536:1587:1593:1594:1711:1714:1730:1747:1766:1792:2073:2076:2393:2559:2562:2828:3867:3869:3873:5007:6261,0,RBL:none,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,MSF:not bulk,SPF:,MSBL:none,DNSBL:none,TSO:0 X-Spamcatcher-Explanation: X-Virus-Scanned: By virus scanner at Cytanet Message-ID: <8B6BF60ACA1C4DEBB006F5EC1628A69C[at]dill99f99894d7> From: "My Correspondent" <genuine.sender[at]cytanet.com.cy> To: "My.address" <sleepy.john[at]virgin.net> Subject: Rejection Date: Sat, 26 Apr 2008 07:26:46 +0300 X-Mailer: Microsoft Outlook Express 6.00.2900.3311 X-SpamCop-Checked: X-SpamCop-Disposition: Blocked SpamAssassin=4 X-SpamCop-Whitelisted: genuine.sender[at]cytanet.com.cy ------- Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.