https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6067

           Summary: SpamAssassin is currently unable to reliably detect The
                    Bat! by Message-ID; rule FORGED_MUA_THEBAT_MSGID  is
                    missing
           Product: Spamassassin
           Version: 3.2.5
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules
        AssignedTo: [email protected]
        ReportedBy: [email protected]


A reliable way to detect The Bat! is by message-id, not by x-mailer.

Here is the Delphi code from The Bat! that makes the message-id:

      Result := Format('<%d%d.%4.4d%2.2d%2.2d%2.2d%2.2d%2...@%s>',
                         [Random(200), Random(MaxInt div 200), Year,
                          Month, Day, Hour, Min, Sec, S]);

where 
 * Random(n) gives [0..n-1]
 * MaxInt div 200 = 10737418
 * Year, Month, Day, Hour, Min, Sec are in local time
 * S contains an FQDN

 For example, Message-ID: <[email protected]>


We should add the following rule:

meta FORGED_MUA_THEBAT_MSGID    (__THEBAT_MUA && !__BAT_MSGID)


-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to