You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2008/12/12 22:34:36 UTC

[Bug 5878] IPV4_ADDRESS regexp matches ip.ad.dr.in-addr.arpa format

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5878


dan pritts <da...@yahoo.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |danpritts@yahoo.com




--- Comment #4 from dan pritts <da...@yahoo.com>  2008-12-12 13:34:36 PST ---
I got a bunch of similar FP's with RCVD_NUMERIC_HELO today; a bunch of my staff
was staying at the same hotel, and using the hotel's internet service.

[30294] dbg: rules: ran header rule HELO_DYNAMIC_IPADDR2 ======> got hit: 
"[ ip=66.238.164.2 rdns=66.238.164.2.ptr.us.xo.net
helo=154.3.168.192.in-addr.arpa.noptr.antlabs.com 
by=magus.merit.edu ident= envfrom= intl=0 id=ADD7B225CEB auth= "

The actual Received line is:

Received: from 154.3.168.192.in-addr.arpa.noptr.antlabs.com
(66.238.164.2.ptr.us.xo.net [66.238.164.2])
        by magus.merit.edu (Postfix) with ESMTP id ADD7B225CEB;
        Thu, 11 Dec 2008 22:40:02 -0500 (EST)

Tony's analysis seems correct to me.  I'm not sure if there's something better
than using a literal space in the regexp (\s instead perhaps?) but \b is
clearly wrong.

thanks all for all your hard work on SA.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.