false positive?

[Antony Stone]

On Tuesday 12 August 2003 10:08 pm, Tim Tyler wrote:

> Antony,
>    Ok, that makes sense.  The violation that I see was triggered from
> caramail.com though the full smtp server address follows it in
> parenthesis.  Is it the configuration of their mail client or mail
> server?  Is there any specific advise that I can give back to the sender?

Well, the question I would ask is "what is their correct email address"?

If their email address is somebody at something.caramail.com then they need to
change their email client program so that it sends out email from the correct
address (if they say they've done that, and you really believe they know what
they're talking about, then it's possible that the server they're sending
through is rewriting the source address - but I would say this is very very
unlikely).

If, on the other hand, their email address really is just
somebody at caramail.com (ie: without the something), and therefore the
SpamAssassin rule which complains about such an address is inappropriate,
then I suggest you (a) edit the rule in your file
/usr/share/spamassassin/20_head_tests.cf to remove the entry for caramail,
and also report this to SA so that they can amend the rule in the general
distribution.

Regards,

Antony.

--

Success is a lousy teacher.   It seduces smart people into thinking they
can't lose.

 - William H Gates III