You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2004/11/01 20:35:51 UTC

[Bug 3814] ALL_TRUSTED fp with AV scanner MTA inserting IP address of 127.0.0.1.

http://bugzilla.spamassassin.org/show_bug.cgi?id=3814

jm@jmason.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME
            Summary|ALL_TRUSTED                 |ALL_TRUSTED fp with AV
                   |                            |scanner MTA inserting IP
                   |                            |address of 127.0.0.1.



------- Additional Comments From jm@jmason.org  2004-11-01 11:35 -------
I'm closing this WORKSFORME.   it's definitely something that needs to be fixed
in the AV scanner; it's simply not recording the external hop *at all*.  this is
*not* a normal situation ;)

either fix the AV scanner, or set ALL_TRUSTED score to 0.   I'd recommend fixing
the AV scanner, because you'll miss a massive amount of useful rules without
that data getting into the headers.  there's a huge amount of data that is used
in spam-detection based around what the last untrusted machine claimed as HELO,
what its IP was, what its rDNS was, etc. etc.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.