[horde] IMP and SA issues

Tuc tuc at ttsg.com
Fri Nov 19 15:31:13 PST 2004


> 
> Zitat von Tuc <tuc at ttsg.com>:
> 
> > Hi,
> >
> > 	Having a problem with a users emails being caught by SpamAssassin
> > and it complaining about the line in compose.php that builds the "Received"
> > line out of who the remote client is, webserver is, etc.
> >
> > 	Is there a "proper" way to override it, or not have it do that?
> 
> How about giving us an error message?
> 
	Its not an "error" per se.

	Its causing SA to catch it as spam due to :

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.5 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr 2)
 3.7 HELO_DYNAMIC_HCC       Relay HELO'd using suspicious hostname (HCC)


	in the 20_fake_helo_tests.cf, it determines that by :

header HELO_DYNAMIC_IPADDR2 X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\d+[^\d\s]\
d+[^\d\s]\d+[^\d\s]\d+[^\d\s][^\.]*\.\S+\.\S+/i

header HELO_DYNAMIC_HCC   X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S*\d+[^\d\s]
+\d+\S*\.(?:docsis|cable|dsl|adsl|dhcp|cpe)\./i


	IMP is generating the line :

Received: from 123-123-123-123.dsl.cust.isp.net
        (123-123-123-123.dsl.cust.isp.net [123.123.123.123])  by
        webmail.domain.com (IMP) with HTTP  for <userid at 127.0.0.1>; Fri, 19
        Nov 2004 11:32:31 -0500


	which is causing the problem. Is there a way to either via a config
change the format of the line or to exclude that line? I don't seem to see
any conditionals for including it.  I could edit compose.php directly, but
I want to avoid that if at all possible.

			Thanks, Tuc/TTSG Internet Services, Inc.



More information about the horde mailing list