> -----Original Message----- > From: Richard Frovarp [mailto:[EMAIL PROTECTED] > Sent: donderdag 19 oktober 2006 1:02 > To: users@spamassassin.apache.org > Subject: Re: Scoring PTR's > > > > Now how can I make a rule to score if the PTR is different than > > the reported mail server like the SPAMMER below?:
> Received: from mail.apache.org (hermes.apache.org [209.237.227.199]) > > Here we're lucky and the domain is at least the same, but there is no > need for that to even happen. Especially then you think about virtual > hosting. Yes, a very bad idea. And a mite on the side of RFC ignorance. :) "mail.apache.org" is the HELO name, supplied by the connecting client. This FQDN has to resolve to the connecting IP address, 209.237.227.199, which is does. But the reverse logic is faulty: 209.237.227.199 does NOT have to resolve to "mail.apache.org" (and it doesn't; it resolves to "hermes.apache.org"). - Mark
