On Thu, 3 Sep 2009, Sahil Tandon wrote:

# Warning: UNTESTED!
header   LOCAL_RDNS  X-Spam-Relays-Untrusted =~ /^[^\]]+ rdns=localhost /i
describe LOCAL_RDNS  bogus localhost rDNS
score    LOCAL_RDNS  10.0

Already in the sandbox at http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?view=log

header    RDNS_LOCALHOST  X-Spam-Relays-External =~ /^\[ 
ip=(?!127)\d+\.\d+\.\d+\.\d+ rdns=localhost(?:\.localdomain)? /i
describe  RDNS_LOCALHOST  Sender's public rDNS is "localhost"

It should be in the 3.3.0 release if I understand the autopublication process.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  End users want eye candy and the "ooo's and aaaahhh's" experience
  when reading mail. To them email isn't a tool, but an entertainment
  form.                                                 -- Steve Lake
-----------------------------------------------------------------------
 14 days until the 222nd anniversary of the signing of the U.S. Constitution

Reply via email to