-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

FORGED_RCVD_HELO can be entirely ignored -- it has a virtually-zero score
in 1 scoreset, and is zeroed out in all the others.  

Don't judge a rule's validity by its name, judge by what score the mails
get at the end of the process.  In this case, 0.7 is well in the safe
range...

- --j.

Gregory Zornetzer writes:
> Hi,
> I just noticed something a little weird in a message autogenerated by
> openoffice.org's bug system.  The message tripped several spam rules.
> Ones like NO_REAL_NAME, SUBJECT_ENCODED_TWICE, and SUBJECT_EXCESS_BASE64
> don't bother me so much.  FORGED_RCVD_HELO seems like it shouldn't be
> tripping for a message that's legit like this.  Granted, this is all a bit
> academic, since my bayes correctly ID'ed it as okay.
> 
> I've attached the header portion of the message below.  Are the qmail
> 'Received:' lines to blame?
> 
> Thanks,
> -Greg
> [EMAIL PROTECTED]
> 
> 
> 
> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
>         banyo.nmrfam.wisc.edu
> X-Spam-Level:
> X-Spam-Status: No, score=0.7 required=5.0 tests=BAYES_00,FORGED_RCVD_HELO,
>         NO_REAL_NAME,SUBJECT_ENCODED_TWICE,SUBJECT_EXCESS_BASE64
> autolearn=no
>         version=3.1.0
> Received: from openoffice.org (s002.sfo.collab.net [64.125.133.202])
>         by banyo.nmrfam.wisc.edu (SGI-8.12.5/8.12.5) with SMTP id
>     k0IGoJgM616344
>         for <[EMAIL PROTECTED]>; Wed, 18 Jan 2006 10:50:19 -0600 (CST)
> Received: (qmail 21731 invoked by uid 5302); 18 Jan 2006 16:50:14 -0000
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 21711 invoked by uid 5000); 18 Jan 2006 16:50:13 -0000
> Date: 18 Jan 2006 16:50:13 -0000
> Message-ID: <[EMAIL PROTECTED]>
> Subject:
>     =?UTF-8?B?W0lzc3VlIDYwNzcwXSBOZXcgLSBmZWF0dXJlIHJlcTogY29uZmlndQ==?=
>  =?UTF-8?B?cmFibGUgZm9yd2FyZC9iYWNrIGtleS9tb3VzZSBkdXJpbmcgc2xpZGVzaG93?=
> Reply-to: [EMAIL PROTECTED]
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Content-type: text/plain; charset=UTF-8
> X-Virus-Status: No
> X-Virus-Checker-Version: clamassassin 1.2.2 with clamscan / ClamAV
>     0.88/1244/Tue Jan 17 02:46:07 2006
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFDzoRvMJF5cimLx9ARAoorAJ9je8KfkW565z8vu4nTB1FPRd9CNACfc0G2
AjJOX8WaoP1K/pW/bWwljyg=
=KnIE
-----END PGP SIGNATURE-----

Reply via email to