FYI:
Wonder what moron came up with the idea that Yahoo! should use addresses
in the multicast range 224.0.0.0/4 in the webmail Received headers.
eg:
Received: from [238.67.36.150] by web171402.mail.ir2.yahoo.com via HTTP;
Thu, 05 Feb 2015 10:09:15 GMT
Asume it to be a very unscientific way of hiding the source IP. Whoever
came up with such an idea should be sent back to IT kindergarden.
this hits:
score RCVD_ILLEGAL_IP 3.399
Till Yahoo! finds out how dumb this is and fixes it, you may want to
lower the score on that rule or enjoy better Y! 419 detection :)
score RCVD_ILLEGAL_IP 0.5
If you're a TWitter user, pls Twitt and hope they get some bad press.
h2h
Axb