John Stimson via users skrev den 2022-12-26 21:44:

Here's an example header:

X-Originating-Ip: [40.92.91.45]

this header is expanded in spamassassin and sure currently gives https://dnswl.org/s/?s=1357

i consider trust here not good to use forged header info to whitelist ips, when this ip is not in recieved header

X-Originating-Ip should not be used for whitelists, only for blacklist rbl, even on only blacklist its unsafe to use, rules maintainers can remove it, now that spamassassin 4.0.0 is out :)

read "perldoc Mail::SpamAssassin::Conf" to see how this header is included, and remove it

Reply via email to