http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5352





------- Additional Comments From [EMAIL PROTECTED]  2007-03-09 04:16 -------
Confirmed, the suggested change will lead to missing some spam, namely that 
from hosts named "cm-12-34-56-78".   Will attach sample mail in a moment.

With rules as follows, where _1 is the original, _2 is the one from this issue 
and _3 is my suggested alternative:

header TEST_DYNAMIC_DHCP_1 X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S*(?:cm|
catv|docsis|cable|dsl|dhcp|cpe|node)\S*\d+[^\d\s]+\d+[^\]]+ auth= /i

header TEST_DYNAMIC_DHCP_2 X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S*(?:
[^a]cm|catv|docsis|cable|dsl|dhcp|cpe|node)\S*\d+[^\d\s]+\d+[^\]]+ auth= /i

header TEST_DYNAMIC_DHCP_3 X-Spam-Relays-Untrusted =~ /^[^\]]+ helo=\S*(?:
(?<!a)cm|catv|docsis|cable|dsl|dhcp|cpe|node)\S*\d+[^\d\s]+\d+[^\]]+ auth= /i

I get scan results:
 0.0 TEST_DYNAMIC_DHCP_1    TEST_DYNAMIC_DHCP_1
 0.0 TEST_DYNAMIC_DHCP_3    TEST_DYNAMIC_DHCP_3
 3.1 HELO_DYNAMIC_DHCP      Relay HELO'd using suspicious hostname (DHCP)

in other words the suggested change will not fire.    I don't have privs to 
re-open this issue, can anybody hear me ? :-)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to