You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Justin Mason <jm...@jmason.org> on 2005/01/28 18:49:01 UTC
Re: HELO_DYNAMIC_IPADDR matches wrongly on hotmail
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Matt Kettler writes:
> At 09:23 AM 1/28/2005, Tony Finch wrote:
> > > Hi, it seems that HELO_DYNAMIC_IPADDR fires wrongly on this header:
> > >
> > > Received: from bay22-dav1.bay22.hotmail.com[64.4.16.181]:30781 (EHLO
> > > hotmail.com) by mailgateway.sitc.dk ([195.231.241.98]:25) (F-Secure
> > > Anti-Virus for Internet Mail 6.41.149 Release) with SMTP; Wed, 19 Jan 2005
> > > 19:41:14 -0000
> >
> >F-Secure Anti-Virus for Internet Mail is producing incorrectly-formatted
> >Received: lines.
>
> Erm, Where is that header invalid? As far as I can see it's following all
> of the rules of RFC 2822.
It's not what SpamAssassin expects a line to look like ;)
generally the receiving site doesn't give its IP address; a lot of faked
headers added by spamware do, though. hence the rule. Ole, could you
open a bug in the SpamAssassin bugzilla about this?
- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Exmh CVS
iD8DBQFB+nsNMJF5cimLx9ARAsoBAJ41IsXID6iP2GqFC3N+Mu3bWhYBCgCfXFJz
+x8Ym8glOGB0VPzW5qPPp2Y=
=vEq/
-----END PGP SIGNATURE-----
Re: HELO_DYNAMIC_IPADDR matches wrongly on hotmail
Posted by Tony Finch <do...@dotat.at>.
On Mon, 31 Jan 2005, Ole Nomann Thomsen wrote:
>
> So I don't feel able to bugzilla this one - any takers?
It isn't a bug in SpamAssassin.
Tony.
--
f.a.n.finch <do...@dotat.at> http://dotat.at/
FAEROES: NORTHWEST 5 TO 7, OCCASIONALLY VARIABLE 3 OR 4 FOR A TIME. RAIN AT
TIMES. MODERATE OR GOOD.
Re: HELO_DYNAMIC_IPADDR matches wrongly on hotmail
Posted by Ole Nomann Thomsen <on...@uni-c.dk>.
Justin Mason wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> Matt Kettler writes:
>> At 09:23 AM 1/28/2005, Tony Finch wrote:
>> > > Hi, it seems that HELO_DYNAMIC_IPADDR fires wrongly on this header:
>> > >
>> > > Received: from bay22-dav1.bay22.hotmail.com[64.4.16.181]:30781 (EHLO
>> > > hotmail.com) by mailgateway.sitc.dk ([195.231.241.98]:25) (F-Secure
>> > > Anti-Virus for Internet Mail 6.41.149 Release) with SMTP; Wed, 19
>> > > Jan 2005 19:41:14 -0000
>> >
>> >F-Secure Anti-Virus for Internet Mail is producing incorrectly-formatted
>> >Received: lines.
>>
>> Erm, Where is that header invalid? As far as I can see it's following all
>> of the rules of RFC 2822.
>
> It's not what SpamAssassin expects a line to look like ;)
>
> generally the receiving site doesn't give its IP address; a lot of faked
> headers added by spamware do, though. hence the rule. Ole, could you
> open a bug in the SpamAssassin bugzilla about this?
I think I ought to wait, until the discussion concludes with something (call
me a chicken:-). Unfortunately I'll be away for 2 months, starting
tomorrow. So I don't feel able to bugzilla this one - any takers?
- Ole.