On Thu, 2010-12-09 at 20:18 +0000, Cedric Knight wrote: > I noticed some bad false positives on email sent from certain web > servers that haven't (yet) been properly configured. For example, a > trusted header line starting:
Ah, so they are operational, just poorly configured. That's what you just said in other words, right? :) Anyway, why are *web* servers sending out mail at all? Other than maybe cron junk and friends, which would warrant bypassing SA or extending your internal network. If they are indeed intended to send out mail to third-parties, they better be configured properly first. > Received: from 94.229.160.4.srvlist.ukfast.net > (94.229.160.4.srvlist.ukfast.net [94.229.160.4]) Looks like a dynamic hostname indeed. > I've emailed UKFast, but don't know when or if they will fix the > problem, so here are some workaround rules for anyone who might be affected: Constructive. I like that. :) -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}