spamassassin-users October 2010 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: Bad pattern in HELO_DYNAMIC_IPADDR check?

Bad pattern in HELO_DYNAMIC_IPADDR check?

From: Angel L. Mateo <amateo_at_nospam>
Date: Thu Oct 28 2010 - 09:25:21 GMT
To: users@spamassassin.apache.org

Hello,

        We are having a problema with one of our users that all his email was
marked as spam. The problem is that all his emails has the
HELO_DYNAMIC_IPADDR (or HELO_DYNAMIC_IPADDR2) check, because
spamassassin thinks that the connection used the IP address in the helo
commando, but not.

        The name used in the helo command is 72d07e260c444a7 (one automatically
generated by windows installer) which is the hostname of the computer.
But HELO_DYNAMIC_IPADDR uses the regular expression
[a-z]\S*\d+[^\d\s]\d+[^\d\s]\d+[^\d\s]\d+[^\d\s][^\.]*\.\S+\.\S+[^\]]+
that much an IP address, but a lot of things more.

        If the purpose of this pattern is to much against an IP address it
should be (more or less) \d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3} or something
like that.

        Is there any reason for this pattern being so general? Or this is a bug?

-- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337