You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2006/05/01 21:43:48 UTC
[Bug 4889] New: new rules: detecting same HELO and BY
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4889
Summary: new rules: detecting same HELO and BY
Product: Spamassassin
Version: unspecified
Platform: All
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P5
Component: Rules
AssignedTo: dev@spamassassin.apache.org
ReportedBy: yoh@flcl.org
header HELO_BY_SAME X-Spam-Relays-Untrusted =~
/ip=(?!(127\.0\.0\.1|192\.168(\.\d{1,3}){2}|172\.(1[6-9]|2\d|3[01](\.\d{1,3}){2}|10(\.\d{1,3}){3})))\d{2,3}(\.\d{1,3}){3}
rdns=[^\[]* helo=([\w\.-]+) by=\7/
describe HELO_BY_SAME HELO is same received MTA's FQDN
score HELO_BY_SAME 1.5
header HELO_BY_PARTIALSAME X-Spam-Relays-Untrusted =~
/ip=(?!(127\.0\.0\.1|192\.168(\.\d{1,3}){2}|172\.(1[6-9]|2\d|3[01](\.\d{1,3}){2}|10(\.\d{1,3}){3})))\d{2,3}(\.\d{1,3}){3}
rdns=[^\[]* helo=([\w\.-]+) by=[\w\.]+\7/
describe HELO_BY_PARTIALSAME HELO is same received MTA's domain name
score HELO_BY_PARTIALSAME 1.5
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4889] new rules: detecting same HELO and BY
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4889
------- Additional Comments From yoh@flcl.org 2006-05-01 19:48 -------
Created an attachment (id=3497)
--> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=3497&action=view)
sample spam: for testing "HELO_BY_SAME"
This is a sample spam for testing "HELO_BY_SAME".
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4889] new rules: detecting same HELO and BY
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4889
yoh@flcl.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #3497|application/octet-stream |text/plain
mime type| |
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4889] new rules: detecting same HELO and BY
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4889
yoh@flcl.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #3498|This is a sample spam for |sample spam for testing
description|testing |"HELO_BY_PARTIALSAME"
|"HELO_BY_PARTIALSAME". |
Attachment #3498|application/octet-stream |text/plain
mime type| |
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4889] new rules: detecting same HELO and BY
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4889
------- Additional Comments From yoh@flcl.org 2006-05-01 19:51 -------
Created an attachment (id=3498)
--> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=3498&action=view)
This is a sample spam for testing "HELO_BY_PARTIALSAME".
This is a sample spam for testing "HELO_BY_PARTIALSAME".
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.