https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5907

Pawel Sasin <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #4 from Pawel Sasin <[email protected]> 2009-10-21 23:19:27 UTC ---
In the Received: header the sting after the HELO token is the string the client
passed to the server at SMTP time. It can consist of any of these characters:

....@%+/=:-_#][
a-z
A-Z
0-9

If client passes anything else it is substituted by a '?' sign, so that you
cannot fool the server with something like:

localhost) (envelope-sender a...@domain)

in the helo argument. The problem here is that the client used
'[192.168.0.136]' as its helo argument and SA took it for a relay. It
shouldn't.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to