[horde] IMP and SA issues
Tuc
tuc at ttsg.com
Fri Nov 19 15:31:13 PST 2004
>
> Zitat von Tuc <tuc at ttsg.com>:
>
> > Hi,
> >
> > Having a problem with a users emails being caught by SpamAssassin
> > and it complaining about the line in compose.php that builds the "Received"
> > line out of who the remote client is, webserver is, etc.
> >
> > Is there a "proper" way to override it, or not have it do that?
>
> How about giving us an error message?
>
Its not an "error" per se.
Its causing SA to catch it as spam due to :
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2)
3.7 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
in the 20_fake_helo_tests.cf, it determines that by :
header HELO_DYNAMIC_IPADDR2 X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\d+[^\d\s]\
d+[^\d\s]\d+[^\d\s]\d+[^\d\s][^\.]*\.\S+\.\S+/i
header HELO_DYNAMIC_HCC X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S*\d+[^\d\s]
+\d+\S*\.(?:docsis|cable|dsl|adsl|dhcp|cpe)\./i
IMP is generating the line :
Received: from 123-123-123-123.dsl.cust.isp.net
(123-123-123-123.dsl.cust.isp.net [123.123.123.123]) by
webmail.domain.com (IMP) with HTTP for <userid at 127.0.0.1>; Fri, 19
Nov 2004 11:32:31 -0500
which is causing the problem. Is there a way to either via a config
change the format of the line or to exclude that line? I don't seem to see
any conditionals for including it. I could edit compose.php directly, but
I want to avoid that if at all possible.
Thanks, Tuc/TTSG Internet Services, Inc.
More information about the horde
mailing list