You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by qu...@apache.org on 2004/05/01 07:27:22 UTC

svn commit: rev 10473 - incubator/spamassassin/trunk/lib/Mail/SpamAssassin

Author: quinlan
Date: Fri Apr 30 22:27:21 2004
New Revision: 10473

Modified:
   incubator/spamassassin/trunk/lib/Mail/SpamAssassin/Received.pm
Log:
add parsing for a HTTP format


Modified: incubator/spamassassin/trunk/lib/Mail/SpamAssassin/Received.pm
==============================================================================
--- incubator/spamassassin/trunk/lib/Mail/SpamAssassin/Received.pm	(original)
+++ incubator/spamassassin/trunk/lib/Mail/SpamAssassin/Received.pm	Fri Apr 30 22:27:21 2004
@@ -444,12 +444,21 @@
       # else it's probably forged. fall through
     }
 
+    # Received: from 217.137.58.28 ([217.137.58.28])
+    # by webmail.ukonline.net (IMP) with HTTP
+    # for <an...@localhost>; Sun, 11 Apr 2004 00:31:07 +0100
+    if (/^from (${IP_ADDRESS}) \(\[${IP_ADDRESS}\]\) by (\S+).*\bwith HTTP/) {
+      # some smarty-pants decided to fake a numeric HELO for HTTP
+      # no rDNS for this format?
+      $ip = $1; $by = $2; goto enough;
+    }
+
     # Received: from ns.elcanto.co.kr (66.161.246.58 [66.161.246.58]) by
     # mail.ssccbelen.edu.pe with SMTP (Microsoft Exchange Internet Mail Service
     # Version 5.5.1960.3) id G69TW478; Thu, 13 Mar 2003 14:01:10 -0500
     if (/^from (\S+) \((\S+) \[(${IP_ADDRESS})\]\) by (\S+) with \S+ \(/) {
       $mta_looked_up_dns = 1;
-      $rdns= $2; $ip = $3; $helo = $1; $by = $4; goto enough;
+      $rdns = $2; $ip = $3; $helo = $1; $by = $4; goto enough;
     }
 
     # from mail2.detr.gsi.gov.uk ([51.64.35.18] helo=ahvfw.dtlr.gsi.gov.uk) by mail4.gsi.gov.uk with smtp id 190K1R-0000me-00 for spamassassin-talk-admin@lists.sourceforge.net; Tue, 01 Apr 2003 12:33:46 +0100