adding FTR:

Received: from [238.10.216.99] by web122903.mail.ne1.yahoo.com via HTTP; Thu, 05 Feb 2015 xx:xx:xx PST

Received: from [238.185.80.95] by web87801.mail.ir2.yahoo.com via HTTP; Thu, 05 Feb 2015 xx:xx:xx GMT


On 02/05/2015 02:02 PM, Axb wrote:
FYI:

Wonder what moron came up with the idea that Yahoo! should use addresses
in the multicast range 224.0.0.0/4 in the webmail Received headers.

eg:

Received: from [238.67.36.150] by web171402.mail.ir2.yahoo.com via HTTP;
Thu, 05 Feb 2015 10:09:15 GMT

Asume it to be a very unscientific way of hiding the source IP. Whoever
came up with such an idea should be sent back to IT kindergarden.


this hits:
score RCVD_ILLEGAL_IP 3.399


Till Yahoo! finds out how dumb this is and fixes it, you may want to
lower the score on that rule or enjoy better Y! 419 detection :)

score RCVD_ILLEGAL_IP 0.5

If you're a TWitter user, pls Twitt and hope they get some bad press.

h2h

Axb


Reply via email to