On 23.11.2015 8.54, Matthias Apitz wrote:
El día Sunday, November 22, 2015 a las 09:23:40PM +0000, RW escribió:
https://wiki.apache.org/spamassassin/Rules/RDNS_NONE
RDNS_NONE checks more than just the PTR (reverse) DNS record.
It really should be named FCRDNS_NONE
Then the wiki is wrong.
This is exactly what I said in my first mail: the description of
RDNS_NONE is just wrong; nearly all my incoming mails are flagged by
RDNS_NONE; for example the mail I'm right now replying to which came
from apache.org says this when I run it through 'spamassassin -D':
$ spamassassin -tD < /tmp/apache > /tmp/apache.o 2> /tmp/apache.d
$ fgrep RDNS_NONE /tmp/apache.d
nov 23 07:46:38.098 [1927] dbg: rules: ran header rule __RDNS_NONE ======> got hit:
"[ ip=140.211.11.3 rdns= "
nov 23 07:46:39.203 [1927] dbg: check:
tests=FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,RCVD_IN_DNSWL_HI,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,RDNS_NONE
...
and 140.211.11.3 has a rDNS:
$ host 140.211.11.3
3.11.211.140.in-addr.arpa domain name pointer hermes.apache.org.
matthias
Blah. That is NOT normal.
X-Originating-IP: 89.204.154.196
X-Spam-Report:
* -5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/,
high
* trust
* [140.211.11.3 listed in list.dnswl.org]
* -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
* [140.211.11.3 listed in wl.mailspike.net]
* 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail
* domains are different
* -1.4 RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
* 0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
* [SPF failed: Please see
http://www.openspf.net/Why?s=mfrom;id=users-return-110372-jarif%3Diki.fi%40spamassassin.apache.org;ip=195.140.195.194;r=gamecock.fredriksson.dy.fi]
* -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
gamecock.fredriksson.dy.fi
--
jarif.bit
