Package: spamassassin
Severity: normal
Using spamassassin 3.1 with exim 4.5 and sa-exim.
I believe there is a problem with the Received.pm file. If a received header
includes a helo statment (helo=mail.example.com) then there are no problems.
But if the helo statment is not included for situations where helo=rdsn, then
spamassassin thinks the helo does not exist.
>From spamd.log:
Sun Mar 12 16:55:11 2006 [2311] dbg: received-header: parsed as
[ ip=66.111.4.28 rdns=out4.smtp.messagingengine.com helo=
by=aurora.northfolk.ca ident= [EMAIL PROTECTED] intl=0
id=1FIMM3-0000bJ-5k auth= ]
Sun Mar 12 16:55:11 2006 [2311] dbg: received-header: relay 66.111.4.28
trusted? no internal? no
Sun Mar 12 16:55:11 2006 [2311] dbg: received-header: parsed as
[ ip=10.202.2.149 rdns=mysql-sessions.internal helo=frontend1.internal
by=frontend1.messagingengine.com ident= envfrom= intl=0 id=690F5D3B608
auth= ]
Sun Mar 12 16:55:11 2006 [2311] dbg: received-header: relay 10.202.2.149
trusted? no internal? no
Sun Mar 12 16:55:11 2006 [2311] dbg: received-header: parsed as
[ ip=10.202.2.152 rdns= helo=frontend3.messagingengine.com
by=frontend1.internal ident= envfrom= intl=0 id=auth= ]
Sun Mar 12 16:55:11 2006 [2311] dbg: received-header: relay 10.202.2.152
trusted? no internal? no
Sun Mar 12 16:55:11 2006 [2311] dbg: spf: checking HELO (helo=,
ip=66.111.4.28)
Sun Mar 12 16:55:11 2006 [2311] dbg: spf: cannot get HELO, cannot use SPF
The actual received headers are:
Received: from out4.smtp.messagingengine.com ([66.111.4.28])
by aurora.northfolk.ca (envelope-from
<[EMAIL PROTECTED]>)
with esmtp (Exim 4.50)
id 1FIMM3-0000bJ-5k
for [EMAIL PROTECTED]; Sun, 12 Mar 2006 16:55:38 +0800
Received: from frontend1.internal (mysql-sessions.internal [10.202.2.149])
by frontend1.messagingengine.com (Postfix) with ESMTP id 690F5D3B608
for <[EMAIL PROTECTED]>; Sun, 12 Mar 2006 03:55:08 -0500 (EST)
Received: from frontend3.messagingengine.com ([10.202.2.152])
by frontend1.internal (MEProxy); Sun, 12 Mar 2006 03:55:08 -0500
Received: by frontend3.messagingengine.com (Postfix, from userid 99)
id 6112A387; Sun, 12 Mar 2006 03:55:07 -0500 (EST)
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8.20050917
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
