You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by R - elists <li...@abbacomm.net> on 2011/11/07 06:15:40 UTC
old old rdns localhost issue...
some of you, like we did, probably noticed long ago that some ip addys rdns
to "localhost"
example
113.166.175.153
dig -x 113.166.175.153
;; QUESTION SECTION:
;153.175.166.113.in-addr.arpa. IN PTR
;; ANSWER SECTION:
153.175.166.113.in-addr.arpa. 86353 IN PTR localhost.
;; AUTHORITY SECTION:
166.113.in-addr.arpa. 86353 IN NS vdc-hn01.vnn.vn.
166.113.in-addr.arpa. 86353 IN NS hcm-server1.vnn.vn.
;; ADDITIONAL SECTION:
vdc-hn01.vnn.vn. 2019 IN A 203.162.0.11
hcm-server1.vnn.vn. 2019 IN A 203.162.4.1
for those of you who are not rejecting, or can not reject them at smtp time
like we are, is there a rule for this ???
- rh
Re: old old rdns localhost issue...
Posted by John Hardin <jh...@impsec.org>.
On Sun, 6 Nov 2011, R - elists wrote:
> some of you, like we did, probably noticed long ago that some ip addys rdns
> to "localhost"
Yup.
> for those of you who are not rejecting, or can not reject them at smtp time
> like we are, is there a rule for this ???
Yup.
http://ruleqa.spamassassin.org/20111105-r1197902-n/RDNS_LOCALHOST/detail
No hits spam or ham in the current masscheck corpora, but it is in the
current rules update:
50_scores.cf:score RDNS_LOCALHOST 3.700 0.969 2.345 0.001
72_active.cf:##{ RDNS_LOCALHOST
72_active.cf:header RDNS_LOCALHOST X-Spam-Relays-External =~ /^\[
ip=(?!127)\d+\.\d+\.\d+\.\d+ rdns=localhost(?:\.localdomain)? /i
72_active.cf:describe RDNS_LOCALHOST Sender's public rDNS is
"localhost"
72_active.cf:##} RDNS_LOCALHOST
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
"Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
does quite what I want. I wish Christopher Robin was here."
-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
Today: Daylight Saving Time ends in U.S. - Fall Back