At Mon Jan 6 19:38:37 2003, Jeremy Nixon wrote: > > So this spam just sneaked into my inbox with 4.9 points. I hate that, it's > the first one in days. > > Looking at it, it turns out that a bunch of bogus Received headers are > fooling Spamassassin into quitting with the DNSBL checks before it gets to > the real meat -- increasing num_check_received to 5 results in hits on five > different DNSBL checks. Looking at the first 5 Received lines gets it to > the first one inserted by a "trusted" mail server, which has a real IP in > it.
I have exactly this problem, and in fact I'd been looking at it literally five minutes before I read your mail. ... > > Random thought: how about a configuration option specifying a regexp which > matches Received headers from "trusted" mail servers, indicating that > spamassassin should stop when it reaches one? Then you could specify > num_check_received as 10, even, and still have it stop when it hits the > first trusted server. I'll second that. Martin -- Martin Radford | "Only wimps use tape backup: _real_ [EMAIL PROTECTED] | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
