You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2004/08/18 02:39:36 UTC

[Bug 3695] New: [RFE] tweak to improve trusted_networks guessing

http://bugzilla.spamassassin.org/show_bug.cgi?id=3695

           Summary: [RFE] tweak to improve trusted_networks guessing
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P3
         Component: Libraries
        AssignedTo: spamassassin-dev@incubator.apache.org
        ReportedBy: quinlan@pathname.com


In addition to looking at the IP address, if the header matches certain
formats (especially QMQP and LMTP), then it should be possible to assume it is
internal.  NNFMP might be similar -- I'm not sure what protocol that is, it
only appears to be used by Yahoo, so I assume it's local-only.  QMQP is the
local protocol of qmail and LMTP is the local protocol used in postfix (and
maybe other stuff too, there's an RFC).  HTTP is another one to consider.

Some examples (I don't have many since I only see them for outgoing mail,
not incoming mail since I use exim which doesn't do this).

Received: from unknown (66.218.66.167)
  by m9.grp.scd.yahoo.com with QMQP; 3 Jan 2004 17:05:30 -0000
--
Received: from unknown (66.218.66.172)
  by m13.grp.scd.yahoo.com with QMQP; 5 Mar 2004 01:46:06 -0000
--
Received: from t.vresp.com (192.168.0.8)
  by mkt7.verticalresponse.com with QMQP; 30 Jun 2004 10:45:59 -0700
--
Received: from po14.mit.edu (po14.mit.edu [18.7.21.72])
        by po14.mit.edu (Cyrus v2.1.5) with LMTP;
--
Received: from victor.transmeta.com ([127.0.0.1])
 by localhost (victor [127.0.0.1]) (amavisd-new, port 10022) with LMTP



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.