-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
FORGED_RCVD_HELO can be entirely ignored -- it has a virtually-zero score in 1 scoreset, and is zeroed out in all the others. Don't judge a rule's validity by its name, judge by what score the mails get at the end of the process. In this case, 0.7 is well in the safe range... - --j. Gregory Zornetzer writes: > Hi, > I just noticed something a little weird in a message autogenerated by > openoffice.org's bug system. The message tripped several spam rules. > Ones like NO_REAL_NAME, SUBJECT_ENCODED_TWICE, and SUBJECT_EXCESS_BASE64 > don't bother me so much. FORGED_RCVD_HELO seems like it shouldn't be > tripping for a message that's legit like this. Granted, this is all a bit > academic, since my bayes correctly ID'ed it as okay. > > I've attached the header portion of the message below. Are the qmail > 'Received:' lines to blame? > > Thanks, > -Greg > [EMAIL PROTECTED] > > > > X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on > banyo.nmrfam.wisc.edu > X-Spam-Level: > X-Spam-Status: No, score=0.7 required=5.0 tests=BAYES_00,FORGED_RCVD_HELO, > NO_REAL_NAME,SUBJECT_ENCODED_TWICE,SUBJECT_EXCESS_BASE64 > autolearn=no > version=3.1.0 > Received: from openoffice.org (s002.sfo.collab.net [64.125.133.202]) > by banyo.nmrfam.wisc.edu (SGI-8.12.5/8.12.5) with SMTP id > k0IGoJgM616344 > for <[EMAIL PROTECTED]>; Wed, 18 Jan 2006 10:50:19 -0600 (CST) > Received: (qmail 21731 invoked by uid 5302); 18 Jan 2006 16:50:14 -0000 > Delivered-To: [EMAIL PROTECTED] > Received: (qmail 21711 invoked by uid 5000); 18 Jan 2006 16:50:13 -0000 > Date: 18 Jan 2006 16:50:13 -0000 > Message-ID: <[EMAIL PROTECTED]> > Subject: > =?UTF-8?B?W0lzc3VlIDYwNzcwXSBOZXcgLSBmZWF0dXJlIHJlcTogY29uZmlndQ==?= > =?UTF-8?B?cmFibGUgZm9yd2FyZC9iYWNrIGtleS9tb3VzZSBkdXJpbmcgc2xpZGVzaG93?= > Reply-to: [EMAIL PROTECTED] > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Content-type: text/plain; charset=UTF-8 > X-Virus-Status: No > X-Virus-Checker-Version: clamassassin 1.2.2 with clamscan / ClamAV > 0.88/1244/Tue Jan 17 02:46:07 2006 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Exmh CVS iD8DBQFDzoRvMJF5cimLx9ARAoorAJ9je8KfkW565z8vu4nTB1FPRd9CNACfc0G2 AjJOX8WaoP1K/pW/bWwljyg= =KnIE -----END PGP SIGNATURE-----