At 03:02 PM 1/12/04 -0800, Mike Batchelor wrote:
I need to make some entries in whilist_from_rcvd. But the only hostnames in the Received: header that I can trust, are not resolveable. Does that matter?

Yes it matters.. SA only looks at the RDNS portion of the Received: header. It will NOT honor a text string in any other part of the received header, since those are easily forged by doing a forged HELO.


Is it a simple pattern/string match, or does SA also try to resolve the hostname?

SA doesn't try to resolve the hostname, it relies on the MTA to do that.




Like this:

whitelist_from_rcvd [EMAIL PROTECTED] NTDOMAIN.private.dns

Should that work?

No, not unless your MTA can resolve an IP to NTDOMAIN.private.dns and put it into a Received: header.


NTDOMAIN.private.dns does not need to forward resolve, but the IP does need to RDNS to that.




------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to