Please Help with SA Rule: FH_HOST_IN_ADDRARPA

[gwilodailo <da...@rc1.ca>]

Hello all,

I've discovered that some mail between two of my clients (on separate hosts)
is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm
not at all an expert with spamassassin, and I'm having some difficulty
finding what this rule is about and what to do about it.

Any help would be greatly appreciated.

Thanks!
-- 
View this message in context: http://old.nabble.com/Please-Help-with-SA-Rule%3A-FH_HOST_IN_ADDRARPA-tp28917943p28917943.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

[Matus UHLAR - fantomas <uh...@fantomas.sk>]

> On 6/17/2010 2:19 PM, gwilodailo wrote:
> > I've discovered that some mail between two of my clients (on separate hosts)
> > is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm
> > not at all an expert with spamassassin, and I'm having some difficulty
> > finding what this rule is about and what to do about it.

On 17.06.10 14:47, Lee Dilkie wrote:
> the rule is flagging the fact that the servers are using non-assigned
> address space.

no, it's flagging that some admin hhad a genial idea to point PTR to itself:

1.1.1.1.in-addr.arpa. PTR 1.1.1.1.in-addr.arpa.
                      A   1.1.1.1
 
-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Christian Science Programming: "Let God Debug It!".

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

[Lee Dilkie <Le...@Dilkie.com>]

the rule is flagging the fact that the servers are using non-assigned
address space.

Fuelly <http://www.fuelly.com/driver/dilkie/golf>

On 6/17/2010 2:19 PM, gwilodailo wrote:
> Hello all,
>
> I've discovered that some mail between two of my clients (on separate hosts)
> is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm
> not at all an expert with spamassassin, and I'm having some difficulty
> finding what this rule is about and what to do about it.
>
> Any help would be greatly appreciated.
>
> Thanks!
>   

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

[RW <rw...@googlemail.com>]

On Thu, 17 Jun 2010 14:41:23 -0400 (EDT)
Charles Gregory <cg...@hwcn.org> wrote:

> On Thu, 17 Jun 2010, gwilodailo wrote:
> >
> > I've discovered that some mail between two of my clients (on
> > separate hosts) is getting flagged as spam, because of this rule
> > (FH_HOST_IN_ADDRARPA). I'm not at all an expert with spamassassin,
> > and I'm having some difficulty finding what this rule is about and
> > what to do about it.
> 
> Your reverse DNS lookup for the hostname resolves to a string
> containing 'in-addr.arpa'. This can be corrected by setting your
> reverse DNS zone to a real hostname for the IP. If you are not in
> control of the DSN you may have to talk to your upstream provider.
> 
> If you are only doing this internally, and never send external mail
> from that host, you can just add a whteilst entry for that hostname.


The rule is:

X-Spam-Relays-External =~ 
 /^[^\]]+ rdns=[^ ]{0,25}\.in-addr\.arpa /

it probably should be:

X-Spam-Relays-External =~ 
/^[^\]]+rdns=[^ ]{0,25}\.in-addr\.arpa[^]]+auth= /


That said, this kind of rule should not be firing on internal mail.
Such mail should either be kept out of SA or the internal network
should include the hosts' ip addresses - either directly or via
msa_networks.

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

[Charles Gregory <cg...@hwcn.org>]

On Thu, 17 Jun 2010, gwilodailo wrote:
>
> I've discovered that some mail between two of my clients (on separate hosts)
> is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm
> not at all an expert with spamassassin, and I'm having some difficulty
> finding what this rule is about and what to do about it.

Your reverse DNS lookup for the hostname resolves to a string containing
'in-addr.arpa'. This can be corrected by setting your reverse DNS zone to 
a real hostname for the IP. If you are not in control of the DSN you may 
have to talk to your upstream provider.

If you are only doing this internally, and never send external mail from 
that host, you can just add a whteilst entry for that hostname.

-Charles