On 1/28/2010 5:23 PM, Adam Katz wrote:
However, as you noted earlier:
It's all because
http://www.rulesemporium.com/rules/70_sare_header1.cf
header SARE_RECV_SPAM_DOMN0b Received =~
/\bdynamic.hinet\.(?:com|net|org|info)/
describe SARE_RECV_SPAM_DOMN0b Email passed through apparent spammer domain
score SARE_RECV_SPAM_DOMN0b 1.666
This rule is poorly written as it does not limit its examination to
the last external relay. Were SARE accepting revisions (and assuming
I've read the intent right), it should be reworked so as to be defined
as (be wary of mail agent rewrapping):
header SARE_RECV_SPAM_DOMN0b X-Spam-Relays-External =~ /&[^\]]+
rdns=[^ ]{0,25}\bdynamic.hinet\.(?:com|net|org|info)(?:\.tw)? /
the rule has been scored 0.0
It can be replaced by a SA rule if desired.
