On Thu, 2010-12-09 at 20:18 +0000, Cedric Knight wrote:
> I noticed some bad false positives on email sent from certain web
> servers that haven't (yet) been properly configured.  For example, a
> trusted header line starting:

Ah, so they are operational, just poorly configured. That's what you
just said in other words, right? :)

Anyway, why are *web* servers sending out mail at all? Other than maybe
cron junk and friends, which would warrant bypassing SA or extending
your internal network. If they are indeed intended to send out mail to
third-parties, they better be configured properly first.

> Received: from 94.229.160.4.srvlist.ukfast.net
> (94.229.160.4.srvlist.ukfast.net [94.229.160.4])

Looks like a dynamic hostname indeed.


> I've emailed UKFast, but don't know when or if they will fix the
> problem, so here are some workaround rules for anyone who might be affected:

Constructive. I like that. :)


-- 
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Reply via email to