Hi Chris, > -----Original Message----- > From: Covington, Chris
> This is what I'm now using w/Postfix (should work for any MTA): > > header NO_RDNS Received=~ /\(unknown[ ]\[/ > describe NO_RDNS Sending MTA has no reverse DNS > score NO_RDNS 2.5 > > header NO_RDNS2 Received=~ /\(\[.*\]\)/ > describe NO_RDNS2 Sending MTA has no reverse DNS > score NO_RDNS2 2.5 This is an actual line in a header Received: from 216.36.92.204 (unknown [211.207.106.32]) How about the following: header NO_RDNS Received =~ /from.* \(unknown \[\d+\.\d+\.\d+\.\d+\]\)/i What do you think? I think that you will want to lower the score to maybe 1.0. There are a lot of legitimate mail servers that do not have a reverse lookup. You can always raise the score if it is working for you. It is better to start with more FNs than FPs. Just my opion! Regards, Larry ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
