spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From John Hardin <jhar...@impsec.org>
Subject Re: FORGED_MUA_MOZILLA & FORGED_YAHOO_RCVD
Date Tue, 30 May 2017 01:35:24 GMT
On Fri, 26 May 2017, RW wrote:

> On Thu, 25 May 2017 17:29:00 -0700 (PDT)
> John Hardin wrote:
>
>> On Thu, 25 May 2017, RW wrote:
>>> Message-ID: <74e85e8d-2495-665b-372f-0144bcb2c9df@mcgrail.com>
>>>
>>>>> header __MOZILLA_MSGID         MESSAGEID =~
>>>>> /^<[A-F\d]{8}\.[A-F1-9][A-F\d]{0,7}\@\S+>$/m
>>>>>
>>>>> Message-ID:
>>>>> <e8ec7c2a-e172-f9ca-f224-acb7192a8242@sochasignage.com>
>>
>> So it looks like Mozilla has changed Message-ID values from 8hex.8hex
>> uppercase-only to a lowercase GUID. That's a simple enough change to
>> make to that rule.
>
> The pattern seems to be consistently 8-4-4-4-12.

Ready for working masschecks and new release:
https://svn.apache.org/viewvc?view=revision&revision=1796722
https://svn.apache.org/viewvc?view=revision&revision=1796723

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   The world has enough Mouse Clicking System Engineers.
                                                        -- Dave Pooser
-----------------------------------------------------------------------
  Today: Memorial Day - honor those who sacrificed for our liberty

Mime
View raw message