On Thu, 30 Jul 2009, Benny Pedersen wrote:

On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote:
the attached mail is whitelisted because 220.231.127.15 resolves to
localhost.  Am I doing something wrong or is this a bug?

non working dns is not a spamassassin bug

How do you get "non-working DNS" from that report? I'd say it looks more like "malicious rDNS" or "incompetently-administered rDNS"...

jhar...@mercury ~ $ dig -x 220.231.127.15

; <<>> DiG 9.4.3-P2 <<>> -x 220.231.127.15
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2699
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;15.127.231.220.in-addr.arpa.   IN      PTR

;; ANSWER SECTION:
15.127.231.220.in-addr.arpa. 43200 IN   PTR     localhost.

;; Query time: 741 msec
;; WHEN: Thu Jul 30 08:43:25 2009
;; MSG SIZE  rcvd: 68

The IP is assigned to Vietnam, for whatever that's worth.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  If guards and searches and metal detectors can't keep a gun out of
  a maximum-security solitary confinement prisoner's cell, how will
  a disciplinary policy and some signs keep guns out of a university?
-----------------------------------------------------------------------
 6 days until the 274th anniversary of John Peter Zenger's acquittal

Reply via email to