https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6460

           Summary: False positives with RCVD_ILLEGAL_IP
           Product: Spamassassin
           Version: 3.3.1
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules
        AssignedTo: [email protected]
        ReportedBy: [email protected]


The rule RCVD_ILLEGAL_IP seems to fire erroneously

>From debug:

Jul  2 14:28:07.473 [9951] dbg: metadata: X-Spam-Relays-Untrusted: [
ip=80.249.108.233 rdns=233.ncuk.mta.dotmailer.co.uk
helo=233.ncuk.mta.dotmailer.co.uk by=mx1.herefordshire.gov.uk ident= envfrom=
intl=0 id=o62DG6UR005877 auth= msa=0 ] [ ip=10.0.12.33 rdns=dmdroid201
helo=dmdroid201 by=233.ncuk.mta.dotmailer.co.uk ident=
[email protected] intl=0 id=h5nj4g0vbl8d auth=
msa=0 ]


The rule:

header RCVD_ILLEGAL_IP         X-Spam-Relays-Untrusted =~ /
(?:by|ip)=(?:[05]|14|23|3[1679]|4[29]|1(?:0[0-6]|7[679]|8[15])|2(?:2[3-9]|[3-5]\d)|169\.254|192\.0\.2|198\.51\.100|203\.0\.113)\./

As the score for this is 3.399, it is creating a few too many false positives
here.

(sa-update reposrts version 953612)

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to