https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6986

            Bug ID: 6986
           Summary: Overlapping HELO tests: CK_HELO_DYNAMIC_SPLIT_IP,
                    HELO_DYNAMIC_IPADDR2, HELO_DYNAMIC_HCC
           Product: Spamassassin
           Version: 3.3.2
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules
          Assignee: [email protected]
          Reporter: [email protected]

Hi,

We received some false positives due to HELO checks overlapping and applying a
high score. The received header from a ham message: 

Received: from 82-69-83-178.dsl.in-addr.zen.co.uk (HELO
82-69-83-178.dsl.in-addr.zen.co.uk [82.69.83.178])
    by mx.example.com (qpsmtpd/0.80) with ESMTP id 1383824659htusq28abh; Wed,
27 Nov 2013 11:44:19 +0000

hits 4 rules, of which 3 are accounting for a total score of ~7.9: 
- CK_HELO_DYNAMIC_SPLIT_IP (score: 1.492)
- TVD_RCVD_IP (score: 0.001)
- HELO_DYNAMIC_IPADDR2 (score: 3.888)
- HELO_DYNAMIC_HCC (score: 2.514)

This looks a bit the same issue as with bug #6874.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to