Hi List... my first post - hopefully something worthwhile:
in SpamAssassin/EvalTests.pm:
the original
sub check_rbl
if ($#ips > 1) {
@ips = @ips[$#ips-1 .. $#ips]; # only check the originating 2
}
is not such a good idea when the RBL also checks for dialups such as
relays.osirusoft.com (main zone includes dialups / cable / DSL as well!),
blackholes.five-ten-sg.com or dynablock.wirehub.net. The originator will
very likely be dialup / cable / DSL - and that's fine as long as they go
past a decent relay that they are authenticated for.
my suggested approach therefore is:
if ($#ips >= 1) { # originator isn't sending directly...
@ips = @ips[1 .. $#ips-1]; # check 2+nd stage relay, but not
originator
}
this should also help reducing false positives from osirusoft and more
importantly from five-ten-sg.com - which has a very good dialup IP pool!
What do you think?
- Gregor
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
