[horde] IMP and SA issues
    Tuc 
    tuc at ttsg.com
       
    Fri Nov 19 15:31:13 PST 2004
    
    
  
> 
> Zitat von Tuc <tuc at ttsg.com>:
> 
> > Hi,
> >
> > 	Having a problem with a users emails being caught by SpamAssassin
> > and it complaining about the line in compose.php that builds the "Received"
> > line out of who the remote client is, webserver is, etc.
> >
> > 	Is there a "proper" way to override it, or not have it do that?
> 
> How about giving us an error message?
> 
	Its not an "error" per se.
	Its causing SA to catch it as spam due to :
 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.5 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr 2)
 3.7 HELO_DYNAMIC_HCC       Relay HELO'd using suspicious hostname (HCC)
	in the 20_fake_helo_tests.cf, it determines that by :
header HELO_DYNAMIC_IPADDR2 X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\d+[^\d\s]\
d+[^\d\s]\d+[^\d\s]\d+[^\d\s][^\.]*\.\S+\.\S+/i
header HELO_DYNAMIC_HCC   X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S*\d+[^\d\s]
+\d+\S*\.(?:docsis|cable|dsl|adsl|dhcp|cpe)\./i
	IMP is generating the line :
Received: from 123-123-123-123.dsl.cust.isp.net
        (123-123-123-123.dsl.cust.isp.net [123.123.123.123])  by
        webmail.domain.com (IMP) with HTTP  for <userid at 127.0.0.1>; Fri, 19
        Nov 2004 11:32:31 -0500
	which is causing the problem. Is there a way to either via a config
change the format of the line or to exclude that line? I don't seem to see
any conditionals for including it.  I could edit compose.php directly, but
I want to avoid that if at all possible.
			Thanks, Tuc/TTSG Internet Services, Inc.
    
    
More information about the horde
mailing list