[horde] IMP and SA issues

Jan Schneider jan at horde.org
Fri Nov 19 15:38:18 PST 2004


See the mailing list archive. That's SA's fault.

Zitat von Tuc <tuc at ttsg.com>:

>>
>> Zitat von Tuc <tuc at ttsg.com>:
>>
>> > Hi,
>> >
>> > 	Having a problem with a users emails being caught by SpamAssassin
>> > and it complaining about the line in compose.php that builds the 
>> "Received"
>> > line out of who the remote client is, webserver is, etc.
>> >
>> > 	Is there a "proper" way to override it, or not have it do that?
>>
>> How about giving us an error message?
>>
> 	Its not an "error" per se.
>
> 	Its causing SA to catch it as spam due to :
>
>  pts rule name              description
> ---- ---------------------- 
> --------------------------------------------------
>  3.5 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname 
> (IP addr 2)
>  3.7 HELO_DYNAMIC_HCC       Relay HELO'd using suspicious hostname (HCC)
>
>
> 	in the 20_fake_helo_tests.cf, it determines that by :
>
> header HELO_DYNAMIC_IPADDR2 X-Spam-Relays-Untrusted =~ /^[^\]]+ 
> helo=\d+[^\d\s]\
> d+[^\d\s]\d+[^\d\s]\d+[^\d\s][^\.]*\.\S+\.\S+/i
>
> header HELO_DYNAMIC_HCC   X-Spam-Relays-Untrusted =~ /^[^\]]+ 
> helo=\S*\d+[^\d\s]
> +\d+\S*\.(?:docsis|cable|dsl|adsl|dhcp|cpe)\./i
>
>
> 	IMP is generating the line :
>
> Received: from 123-123-123-123.dsl.cust.isp.net
>         (123-123-123-123.dsl.cust.isp.net [123.123.123.123])  by
>         webmail.domain.com (IMP) with HTTP  for <userid at 127.0.0.1>; Fri, 19
>         Nov 2004 11:32:31 -0500
>
>
> 	which is causing the problem. Is there a way to either via a config
> change the format of the line or to exclude that line? I don't seem to see
> any conditionals for including it.  I could edit compose.php directly, but
> I want to avoid that if at all possible.
>
> 			Thanks, Tuc/TTSG Internet Services, Inc.
>
>



Jan.

-- 
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/



More information about the horde mailing list