https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6650
Bug #: 6650
Summary: KHOP_DYNAMIC fires on yahoo.com relays
Product: Spamassassin
Version: 3.3.2
Platform: PC
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Rules
AssignedTo: [email protected]
ReportedBy: [email protected]
Classification: Unclassified
Mail from yahoo.com relays is hitting KHOP_DYNAMIC.
meta KHOP_DYNAMIC __LAST_EXTERNAL_RELAY_NO_AUTH && !ALL_TRUSTED &&
(__5_SUBDOM || __RDNS_HEX || __S25R_4 || __S25R_6 || __RCD_RDNS_DYN_MESSY ||
__RCD_RDNS_PPP_MESSY || __RCD_RDNS_PPOE_MESSY)
72_active.cf:describe KHOP_DYNAMIC Relay looks like a dynamic address
Presumably the intention is to hit dynamic addresses.
It hits on:
Received: from nm4-vm0.bt.bullet.mail.ukl.yahoo.com
(nm4-vm0.bt.bullet.mail.ukl.yahoo.com [217.146.182.229])
by quad.pendre.co.uk (Postfix) with SMTP id 8229F194001
for <[email protected]>; Mon, 15 Aug 2011 16:34:51 +0100 (BST)
Running the message through debug mode shows it hits __5_SUBDOM although I'm
not sure how as there's no X-Spam-Relays-External header present in the email.
72_active.cf:header __5_SUBDOM X-Spam-Relays-External =~ /^[^\]]+ rdns=(?:[^.
]*\.){6,}\w+ /
Aug 15 20:47:31.757 [19902] dbg: check:
tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,KHOP_DYNAMIC,RCVD_IN_DNSWL_NONE,UNPARSEABLE_RELAY
Aug 15 20:47:31.757 [19902] dbg: check:
subtests=__5_SUBDOM,__ANY_OUTLOOK_MUA,__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,__CT,__CTE,__CTYPE_CHARSET_QUOTED,__CT_TEXT_PLAIN,__DKIM_DEPENDABLE,__DKIM_EXISTS,__DOS_HAS_ANY_URI,__DOS_RCVD_MON,__DOS_RELAYED_EXT,__ENV_AND_HDR_FROM_MATCH,__FH_HAS_XMSMAIL,__FH_HAS_XPRIORITY,__FM_LARGE_MONEY,__F_LARGE_MONEY,__HAS_ANY_EMAIL,__HAS_ANY_URI,__HAS_DATE,__HAS_FROM,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_MSMAIL_PRI,__HAS_OFFICE1214_IN_MAILER,__HAS_RCVD,__HAS_SUBJECT,__HAS_THREAD_INDEX,__HAS_X_MAILER,__HAVE_BOUNCE_RELAYS,__HS_SUBJ_RE_FW,__LAST_EXTERNAL_RELAY_NO_AUTH,__LAST_UNTRUSTED_RELAY_NO_AUTH,__LOCAL_SUBJ_BLANK,__LOCAL_SUBJ_CONTENT,__LOCAL_SUBJ_RE,__MIME_CTYPE_TEXT,__MIME_QP,__MIME_VERSION,__MSGID_OK_HOST,__NONEMPTY_BODY,__NOT_A_PERSON,__NOT_SPOOFED,__RCD_RDNS_MAIL_MESSY,__RCVD_IN_DNSWL,__RCVD_IN_JMF,__S25R_1,__SANE_MSGID,__SUBJ_RE,__SUBSCRIPTION_INFO,__THREADED,__THREAD_INDEX_GOOD,__TOCC_EXISTS,__TVD_MIME_ATT_TP,__XM_MS_IN_GENERAL,__freemail_safe,__freemail_safe_fwd
Let me know if you need more info.
--
Configure bugmail:
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
