You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2014/04/24 19:37:44 UTC

[Bug 6986] Overlapping HELO tests: CK_HELO_DYNAMIC_SPLIT_IP, HELO_DYNAMIC_IPADDR2, HELO_DYNAMIC_HCC

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6986

Kyle M <ky...@linuxmagic.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kylem@linuxmagic.com

--- Comment #4 from Kyle M <ky...@linuxmagic.com> ---
I'd like to chime in with our false positive too..

6.6/5.0
 1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
                            (Split IP)
 0.2 CK_HELO_GENERIC        Relay used name indicative of a Dynamic Pool or
                            Generic rPTR
 2.0 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                            2)
 0.4 RDNS_DYNAMIC           Delivered to internal network by host with
                            dynamic-looking rDNS
 2.5 HELO_DYNAMIC_HCC       Relay HELO'd using suspicious hostname (HCC)

The valid helo is formatted as so: 11-23-456-78.abcd.efg.hijk.com

We're looking at reducing these scores as well, since there seems to be quite a
bit of overlapping scores being triggered here.

-- 
You are receiving this mail because:
You are the assignee for the bug.