https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6923

            Bug ID: 6923
           Summary: RCVD_ILLEGAL_IP incorrectly matches a range
           Product: Spamassassin
           Version: 3.3.1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Plugins
          Assignee: [email protected]
          Reporter: [email protected]
    Classification: Unclassified

I just got an email from 5.9.12.0/24 range (public range) that caused
triggering a FP from RCVD_ILLEGAL_IP.

Headers (obfuscated) from the email are:

Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from localhost (localhost [127.0.0.1])
    by atlantis.example.org (Postfix) with ESMTP id 5074012F681
    for <[email protected]>; Fri, 29 Mar 2013 19:53:07 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at example.org
X-Spam-Flag: NO
X-Spam-Score: 3.476
X-Spam-Level: ***
X-Spam-Status: No, score=3.476 tagged_above=-999 required=5 tests=[AWL=-0.126,
    BAYES_00=-1.9, FSL_HELO_NON_FQDN_1=0.001, HELO_NO_DOMAIN=1,
    HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.723,
    MIME_QP_LONG_LINE=0.001, RCVD_ILLEGAL_IP=3.399] autolearn=no
Received: from atlantis.example.org ([127.0.0.1])
    by localhost (atlantis.example.org [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id oKQwm3q3ADjo for <[email protected]>;
    Fri, 29 Mar 2013 19:52:52 +0100 (CET)
X-Greylist: whitelisted by SQLgrey-1.8.0-rc2
Received: from example (example.example.com [5.9.12.XXX])
    by atlantis.example.org (Postfix) with ESMTP id 8487A87C8A
    for <[email protected]>; Fri, 29 Mar 2013 19:52:52 +0100 (CET)
Received: by example (Postfix, from userid 1000)
    id 972D0C2C0D9; Fri, 29 Mar 2013 19:52:51 +0100 (CET)

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to