Re: [exim] Unknown Sender

John W. Baxter wrote:

> On 11/10/05 7:33 PM, "Bill Hacker" <wbh@???> wrote:
>
>
>>Marc Sherman wrote:
>>
>>
>>>Marc Sherman wrote:
>>>
>>>
>>>>Robert Cates wrote:
>>>>
>>>>
>>>>>OK, here they are (one of the differences is the @kormar.net (from
>>>>>Outlook)
>>>>>and @kormar.de (from Thunderbird) addresses, but I don't see where that
>>>>>could matter)...
>>>>
>>>>
>>>>
>>>>I'll bet that's it, in fact. Try reconfiguring your outlook account
>>>>to send as kormar.de, and vice-versa, and see what happens.
>>>
>>>
>>>It's SPF. kormar.net has an SPF record, kormar.de does not.
>>>
>>>I'd eliminate the kormar.net SPF record, if I were you.
>>>
>>>- Marc
>>>
>>
>>Could be much more basic than that, as previously stated.
>>
>>Note that T-Bird has supplied a message-id header.
>>Outlook has not done so.
>
>
> A few versions ago, some genius in Redmond seemingly decided that (a)
> Outlook obviously would only be used with Exchange and (b) that the form of
> Message-Id: which Outlook had been using was giving away information about
> the internal network. So Outlook no longer does Message-Id: headers,
> leaving it to Exchange to stick one on.
>
> Exim's control=submission appeared at about that time.
>
> Item (a) above is manifestly untrue. Item (b) above could likely have been
> worked around by using a hash of the workstation's MAC address on the right
> of the @ in the Message-Id. [The Microsoft of that time might well have
> created a new, insecure hash mechanism and patented it.]
>
> --John
>

As rational an explanation as can be - given the players ;-)

But what is important here is also that Exim appears to NOT have
been set to act on the missing message-id header in this case - nor
SpamAssassin.

This appears to be a case of the T-Bird MUA *on it's own* tagging as junk.

That is not necessarily related to the header issue - there could all
manner of
other artifacts & scores accumulated in the individual user's Bayesian DB.

Perhaps as simple as a high volume of 'test' messages.....

A clean install, or parallel install of, for example Mozila Suite, with
an empty junk DB and it should disappear.

Simpler yet is to insure the address is in the user's address book, and
set T-Bird to
not flag any such as junk.

IMNSHO, *this* case is just not an Exim issue.

Bill Hacker