https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6669

             Bug #: 6669
           Summary: FAKE_HELO_MAIL_COM_DOM falses as mail.com/email.com
                    are now hosted by GMX
           Product: Spamassassin
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: Rules
        AssignedTo: [email protected]
        ReportedBy: [email protected]
    Classification: Unclassified


Rule falses as mail.com/email.com are now hosted by GMX

header FAKE_HELO_MAIL_COM_DOM  X-Spam-Relays-External =~ /^[^\]]+
helo=(?:\S+\.|)(?:(?:mail|email|iname|cheerful|consultant|europe|mindless|myself|post|techie|usa|writeme|2die4|artlover|bikerider|catlover|cliffhanger|cutey|doglover|gardener|hot-shot|inorbit|loveable|mad\.scientist|playful|poetic|popstar|saintly|seductive|soon|whoever|winning|witty|yours|africamail|arcticmail|asia|australiamail|europe|japan|samerica|usa|berlin|dublin|london|madrid|moscowmail|munich|nycmail|paris|rome|sanfranmail|singapore|tokyo|accountant|adexec|allergist|alumnidirector|archaeologist|chemist|clerk|columnist|comic|consultant|counsellor|deliveryman|diplomats|doctor|dr|engineer|execs|financier|geologist|graphic-designer|insurer|journalist|lawyer|legislator|lobbyist|minister|optician|pediatrician|presidency|priest|publicist|realtyagent|registerednurses|repairman|representative|rescueteam|scientist|sociologist|teacher|techietechnologist|umpire)\.com|(?:programmer|earthling|hairdresser)\.net|musician\.org)
/i
describe FAKE_HELO_MAIL_COM_DOM Relay HELO'd with suspicious hostname
(mail.com)

mail.com and all the world.com legacy domains are now hosed by GMX.net

Received: from mailout-us.mail.com (mailout-us.gmx.com [74.208.5.67])

This whole set needs to be reviewed

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to