Tony Earnshaw said: > Yes. Exim would have given: > > Received: from [63.93.75.161] (helo=hotpop.com) > > I.e., it wasn't validated, completely different from Sendmail (thanks to > the mailadmin from Edinburgh Univ. for putting me right on this and > pointing out the difference, a couple of weeks ago.) > > Exims validation gives the validated FQDN in text first, with its IP > number inside square brackets, inside parenthesis.
Does Exim validate, or not validate, by default? It'd be great if we can parse this stuff inside SpamAssassin without having to do our own domain lookups. (However, I think we may have to at some point, in order to verify that, if the rdns hostname shares the correct domain for helo hostname, NS(helohostname) == NS(rdnshostname). Otherwise spammers can simply set up their own rDNS for their IPs, so that they resolve to something.yahoo.com.) --j. ------------------------------------------------------- This SF.net email is sponsored by:Crypto Challenge is now open! Get cracking and register here for some mind boggling fun and the chance of winning an Apple iPod: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
