What's your trusted_networks look like? Based on the headers below you'll need to set it manually.
By default SA assumes that all the "private range" hosts are part of your network, and the first non-private. However, in this case, the first non-private is yahoo's server. That's bad. Jim Davis wrote: > This autoresponse from Yahoo abuse crept over the spam line, mostly > because of a hit on FORGED_YAHOO_RCVD... but it's not clear from the > headers why that would be. This is a from a Fedora Core 5 system > running SpamAssassin 3.1.3 under amavisd-new 2.4.2: > >> Return-Path: <[EMAIL PROTECTED]> >> Received: from xenopodid.cs.arizona.edu (xenopodid.cs.arizona.edu >> [192.12.69.105]) >> by email.cs.arizona.edu (8.13.3/8.13.3) with ESMTP id >> k8RFY9pl088354 >> for <[EMAIL PROTECTED]>; Wed, 27 Sep 2006 >> 08:34:09 >> -0700 (MST) >> (envelope-from [EMAIL PROTECTED]) >> Received: from localhost (xenopodid.cs.arizona.edu [127.0.0.1]) >> by xenopodid.cs.arizona.edu (Postfix) with ESMTP id 6FCBA6DCCEA >> for <[EMAIL PROTECTED]>; Wed, 27 Sep 2006 >> 08:34:09 >> -0700 (MST) >> X-Virus-Scanned: amavisd-new at cs.arizona.edu >> X-Spam-Flag: YES >> X-Spam-Score: 5.019 >> X-Spam-Level: ***** >> X-Spam-Status: Yes, score=5.019 tagged_above=-9999 required=5 >> tests=[BAYES_40=-0.185, DNS_FROM_RFC_ABUSE=0.2, >> DNS_FROM_RFC_POST=1.708, DNS_FROM_RFC_WHOIS=1.447, >> FORGED_YAHOO_RCVD=1.849] >> Received: from xenopodid.cs.arizona.edu ([127.0.0.1]) >> by localhost (xenopodid.cs.arizona.edu [127.0.0.1]) >> (amavisd-new, >> port 10024) >> with ESMTP id QAQkAwgDuuF1 for >> <[EMAIL PROTECTED]>; >> Wed, 27 Sep 2006 08:34:03 -0700 (MST) >> Received: from cheltenham.cs.arizona.edu (cheltenham.cs.arizona.edu >> [192.12.69.60]) >> by xenopodid.cs.arizona.edu (Postfix) with ESMTP id 90AAC6DCCD1 >> for <[EMAIL PROTECTED]>; Wed, 27 Sep 2006 >> 08:34:03 >> -0700 (MST) >> Received: from mail-relay1.yahoo.com (mail-relay1.yahoo.com >> [216.145.48.34]) >> by cheltenham.cs.arizona.edu (8.13.4/8.13.4) with ESMTP id >> k8RFY0Gj014456 >> for <[EMAIL PROTECTED]>; Wed, 27 Sep 2006 08:34:03 >> -0700 (MST) >> (envelope-from [EMAIL PROTECTED]) >> Received: from speedster.cc.kana.corp.yahoo.com >> (speedster.cc.kana.corp.yahoo.com [207.126.228.28]) >> by mail-relay1.yahoo.com (8.13.6/8.13.6/mr1) with SMTP id >> k8RFMTSi086721 >> for <[EMAIL PROTECTED]>; Wed, 27 Sep 2006 08:22:29 >> -0700 (PDT) >> Message-Id: <[EMAIL PROTECTED]> >> Precedence: bulk >> Auto-Submitted: auto-replied >> Date: Wed, 27 Sep 2006 08:22:28 -0700 >> To: [EMAIL PROTECTED] >> Subject: A message from Yahoo! Customer Care (KMM37445094V70533L0KM) >> From: Yahoo! Mail <[EMAIL PROTECTED]> >> Reply-To: Yahoo! Mail <[EMAIL PROTECTED]> >> MIME-Version: 1.0 >> Content-Type: text/plain; charset = "us-ascii" >> Content-Transfer-Encoding: 7bit >> X-Mailer: KANA Response 7.0.1.142 >> X-UID: 371043 >> >> Thank you for contacting Yahoo! Customer Care to answer your question. A >> support representative will get back to you within 48 hours regarding >> your issue. Until then, feel free to visit our online help center at >> http://help.yahoo.com/ >> for answers if you have not already done so. >
