-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Pedro Sam writes: >Hi all, > >I received the following mail from a yahoo web mail user, but the >FAKE_HELO_YAHOO keeps on hitting. Is this a false positive? The problem is this: > Received: from 216.136.128.122 (HELO web10409.mail.yahoo.com) (216.136.128.122) > by mta137.mail.dcn.yahoo.com with SMTP; Fri, 30 Jan 2004 07:37:14 -0800 note that the hostname does not have rDNS saying "yahoo.com". hence the rule hits. Normally there's a "delivery *from* yahoo" step, which works fine, but that doesn't seem to be the case here. are you POPping it directly from Yahoo!? - --j. >Received: from localhost (localhost [127.0.0.1]) > by p2sam-pc.rogers.com (8.12.10/8.12.10) with ESMTP id i0UFkSLL016979 > for <[EMAIL PROTECTED]>; Fri, 30 Jan 2004 10:46:28 -0500 > X-YahooPOPs-Folder: Inbox > X-Apparently-To: [EMAIL PROTECTED] via 66.218.78.198; Fri, 30 Jan 2004 07:37:15 >-0800 > Received: from localhost [127.0.0.1] > by localhost with POP3 (fetchmail-6.2.5) > for [EMAIL PROTECTED] (single-drop); Fri, 30 Jan 2004 10:46:28 -0500 >(EST) > Received: from 216.136.128.122 (HELO web10409.mail.yahoo.com) >(216.136.128.122) > by mta137.mail.dcn.yahoo.com with SMTP; Fri, 30 Jan 2004 07:37:14 -0800 > Message-ID: <[EMAIL PROTECTED]> > Received: from [192.75.23.73] by web10409.mail.yahoo.com via HTTP; Fri, 30 >Jan 2004 07:37:10 PST > Date: Fri, 30 Jan 2004 07:37:10 -0800 (PST) > From: Paulo Sam <[EMAIL PROTECTED]> > Subject: Re: Andrew is setting up a phone interview for you. > To: Pedro Sam <[EMAIL PROTECTED]> > In-Reply-To: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > Content-Type: text/plain; > charset=us-ascii > X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on p2sam-pc.rogers.com > X-Spam-Level: > X-Spam-Status: No, hits=-2.3 required=5.0 tests=BAYES_00,FAKE_HELO_YAHOO > autolearn=ham version=2.63 > X-UID: 4195 > >[content snipped] > >-- >The makers may make >and the users may use, >but the fixers must fix >with but minimal clues > > >------------------------------------------------------- >The SF.Net email is sponsored by EclipseCon 2004 >Premiere Conference on Open Tools Development and Integration >See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. >http://www.eclipsecon.org/osdn >_______________________________________________ >Spamassassin-talk mailing list >[EMAIL PROTECTED] >https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) Comment: Exmh CVS iD8DBQFAGqspQTcbUG5Y7woRAgLwAKDYPoJ344pMX/yvm2R10YJWoP5bdQCguPdP 77HfeCTqjZg0g/23GQii6T8= =1cKB -----END PGP SIGNATURE----- ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
