Differences between revisions 1 and 2
Revision 1 as of 2008-08-04 23:20:33
Size: 641
Editor: LeeMaguire
Comment:
Revision 2 as of 2009-09-20 23:16:15
Size: 644
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 10: Line 10:
One likely reason for this is that the hostname is taken from the reverse DNS entry used to indicate a dynamically allocated address (see also [:Rules/HELO_DYNAMIC_DHCP]). One likely reason for this is that the hostname is taken from the reverse DNS entry used to indicate a dynamically allocated address (see also [[Rules/HELO_DYNAMIC_DHCP]]).
Line 14: Line 14:
The default scores for this rule can be found [http://spamassassin.apache.org/tests.html in the online list of tests]. The default scores for this rule can be found [[http://spamassassin.apache.org/tests.html|in the online list of tests]].

SpamAssassin Rule: FH_HELO_AMOST_IP

Standard description: Helo is almost an IP addr.

Explanation

An untrusted relay used a hostname (FQDN) as a HELO argument during a SMTP transaction that contains a series of numbers that might represent an IPv4 address.

One likely reason for this is that the hostname is taken from the reverse DNS entry used to indicate a dynamically allocated address (see also Rules/HELO_DYNAMIC_DHCP).

Further Info

The default scores for this rule can be found in the online list of tests.


CategoryRule

Rules/FH_HELO_ALMOST_IP (last edited 2009-09-20 23:16:15 by localhost)