You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2007/12/10 20:22:20 UTC

[Bug 5747] New: new HELO_DYNAMIC_ROGERS format

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747

           Summary: new HELO_DYNAMIC_ROGERS format
           Product: Spamassassin
           Version: 3.2.3
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: paulg@cse.yorku.ca


We got a falso positive on a valid mail from rogers.com. mail from rogers.com 
will trigger HELO_DYNAMIC_DHCP, HELO_DYNAMIC_HCC and HELO_DYNAMIC_IPADDR. 

We handle this my appying a - (minus) score to HELO_DYNAMIC_ROGERS, our problem 
was HELO_DYNAMIC_ROGERS wasn't triggering due the new HELO format.

Please see e-mail headers and my local patch.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747





------- Additional Comments From paulg@cse.yorku.ca  2007-12-10 11:27 -------
Created an attachment (id=4205)
 --> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=4205&action=view)
headers from exim with newly seen header (HELO) from rogers.com




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747





------- Additional Comments From spamassassin@dostech.ca  2007-12-10 11:35 -------
CPE- is consumer dynamic broadband, while cmr- is business static.  I don't
understand why you'd want to assign a negaitve score to CPE-, and thus, why
you'd want to include it in a rule with cmr-.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747





------- Additional Comments From paulg@cse.yorku.ca  2007-12-13 06:58 -------
Created an attachment (id=4210)
 --> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=4210&action=view)
added HELO_STATIC_HOST to 50_score.cf

This simply adds the rule HELO_STATIC_HOST to 50_score.cf, this along with
patch #4205.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747


paulg@cse.yorku.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
Attachment #4204 is|0                           |1
           obsolete|                            |




------- Additional Comments From paulg@cse.yorku.ca  2007-12-13 06:56 -------
Created an attachment (id=4209)
 --> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=4209&action=view)
modifications to 20_fake_helo_tests  to handle static host whose HELO loooks
dynamic

I made a few changes..

1- added generic HELO_STATIC_HOST rule to handle other ISPs and not just
rogers.com
2 - changed HELO_DYNAMIC_IPADDR to a meta rule to exclude HELO_STATIC_HOST
3 - changed HELO_DYNAMIC_DHCP to a meta rule to exclue HELO_STATIC_HOST
4 - added domianname hccnet.nl to HELO_DYNAMIC_HCC to contain rule to just
hccnet.nl hosts




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747





------- Additional Comments From paulg@cse.yorku.ca  2007-12-10 11:42 -------
(In reply to comment #3)
> CPE- is consumer dynamic broadband, while cmr- is business static.  I don't
> understand why you'd want to assign a negaitve score to CPE-, and thus, why
> you'd want to include it in a rule with cmr-.

In the past we had a issue with our web mail (Horde/IMP), e-mail send via IMP 
from  users of Rogers Hi Speed would get unfairly tagged when IMP added a 
received-from header using the clients dynamic Rogers address.

We had the negative score for CPE for a quite a while now.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747





------- Additional Comments From paulg@cse.yorku.ca  2007-12-10 12:03 -------
(In reply to comment #5)
> It sounds like you've got an issue with SA not trusting your IMP machine.
> 
> I could see us excluding cmr- from the dynamic rules, but we certainly 
shouldn't
> combine it with CPE-.  Not that it matters much anyway since Rogers blocks
> 25/tcp on CPE- nowadays.

I agree with you, cmr- rules shouldn't be combined with CPE-, it makes things 
messy. I will have to examine our own historical reasons behind our SA/IMP 
trust issue.

What is the next step, craft a rule to exclude cmr-, close this bugid ??

Thanks
Paul
 







------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747





------- Additional Comments From spamassassin@dostech.ca  2007-12-10 12:14 -------
Fixing whichever dynamic rules that are hitting cmr- would be good.

You can use this bug for that.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747


spamassassin@dostech.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|Undefined                   |3.3.0




------- Additional Comments From spamassassin@dostech.ca  2007-12-10 11:51 -------
It sounds like you've got an issue with SA not trusting your IMP machine.

I could see us excluding cmr- from the dynamic rules, but we certainly shouldn't
combine it with CPE-.  Not that it matters much anyway since Rogers blocks
25/tcp on CPE- nowadays.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5747] new HELO_DYNAMIC_ROGERS format

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5747





------- Additional Comments From paulg@cse.yorku.ca  2007-12-10 11:23 -------
Created an attachment (id=4204)
 --> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=4204&action=view)
patcg against 20_fake_helo_tests.cf

This is a patch against 20_fake_helo_tests.cf to handle a newly seen HELO/host
format.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.