Re: Multiple rules for dynamic-looking IP addresses

2007-09-05 Thread Matus UHLAR - fantomas
On 04.09.07 16:26, Dan Fulbright wrote: > Thank you for the replies, however, I think I'll restate my own > question. Why are there so many rules that seem to check for the same > thing? I can't fully answer that, however HELO string is not reverse DNS. > I'm seeing this more and more often. xo.n

Re: Multiple rules for dynamic-looking IP addresses

2007-09-04 Thread Dan Fulbright
On 2007-08-29 23:16, Dan Fulbright wrote: > I'm having problems with high scores from messages sent from IP > addresses that appear to be dynamic, but in fact are static. Here's an > example: > > * 4.2 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious > hostname (Split >

Re: Multiple rules for dynamic-looking IP addresses

2007-08-30 Thread John D. Hardin
On Wed, 29 Aug 2007, Loren Wilton wrote: > You could probably do something crudely along the lines of > > __STATIC_NAMEReceived =~ /\d\.\static\./ typo: you do not want a backslash in front of the s! __STATIC_NAMEReceived =~ /\d\.static\./ -- John Hardin KA7OHZh