http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5586

           Summary: RDNS_NONE has false positives if the MTA doesn't put the
                    hostname in the Received header
           Product: Spamassassin
           Version: 3.2.1
          Platform: Sun
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


I sent this to the mailing list, but was asked by Justin to submit it as a bug. 
 Doing so now.

After I sent my message, Matthew Yette posted a reply to my message saying that 
the bug also applies 
to qmail 1.03 as well.  He didn't give an example mail header.


The following received header gets RDNS_NONE:

Received: from [69.12.154.165] (HELO mail.rudd.cc)
  by some.internal.test.host (CommuniGate Pro SMTP 5.1.11)
  with ESMTP id 60056 for [EMAIL PROTECTED]; Tue, 31 Jul 2007 14:05:04 -0700



This is an error in the RDNS_NONE logic.  The host in question DOES have RDNS.  
The issue is that 
CommuniGate Pro doesn't put the RDNS information into the Received header (and 
the place where it 
puts the HELO information might instead have the authenticated user, if 
SMTP-AUTH was used).


My recommendation is that the logic for RDNS_NONE should be:


if (Received =~ /\(CommuniGate Pro SMTP /) {
   if (DNS checks are enabled) {
      do the DNS check on the IP address, and then decide if it has RDNS
      }
   else {
      don't trigger RDNS_NONE (because you can't know without the DNS check)
      }
   }
else { # not a CommuniGate Pro MTA
   do existing RDNS_NONE logic
   }



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to