On Thu, 22 Jul 2004 12:24:37 -0400, Dan Karney wrote:

>� Yahoo" rules and Faked HELO rules.

Well... Whatever sent the mail *did* fake the helo.

--8<--
Received: from yahoo.com (h-67-101-100-18.snfccasy.dynamic.covad.net 
[67.101.100.18])
        (authenticated bits=0)
        by mail837.megamailservers.com (8.12.10/8.12.9) with ESMTP id 
i6LJPNrc010128
        for <[EMAIL PROTECTED]>; Wed, 21 Jul 2004 15:25:23 -0400
--8<--

Unfortunately there's a bunch of mail clients (written by stupid programmers) 
that allways uses bad host names in HELO/EHLO.

--8<--
X-Mailer: Apple Mail (2.552)
--8<--

It seems Apple Mail is one of them...

--8<--
USER_AGENT_APPLEMAIL (0.0 points)  X-Mailer header indicates a non-spam MUA 
(Apple Mail)
--8<--

You might want to lower the value of this score in order to counteract the bad 
HELO.

BTW, are you using bayes? We regularly get mail that would have been stopped if 
it weren't for BAYES_00.

Regards
/Jonas

--
Jonas Eckerman, [EMAIL PROTECTED]
http://www.fsdb.org/

Reply via email to