changes:
core:
- bugfix: the initialization for the RBL socket was checked wrong
which resulted in a slower Net::DNS usage for RBL lookups
instead of the own rbl_lookup routine
This bug was introuced in 0.1.13 beta-12
scoring:
- F. Fischer reported a "not so good" scoring-condition in
[EMAIL PROTECTED] (07-19-2006) on this list.
After reviewing it today I came to the solution that
FROM_MATCHES_NOT_HELO can be made more sane by checking
whether the SENDER MX lists a host-entry which matches the HELO
domain argument:
This addresses issues with gmail and yahoo:
Old versions:
info: decided action=PREPEND X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5
NOT_IN_BL_NJABL=-1.5 IX_MANITU=ERR NOT_IN_SPAMCOP=-1.5 CL_IP_EQ_HELO_IP=-2
(check from: .gmail. - helo: .nf-out-0910.google.) FROM_MATCHES_NOT_HELO=1
RANDOM_SENDER=0.25 IN_ABUSE_RFCI=3.975 <client=64.233.182.191>
<helo=nf-out-0910.google.com> <[EMAIL PROTECTED]> <to=>, rate: -1.275
info: decided action=PREPEND X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5
NOT_IN_BL_NJABL=-1.5 IX_MANITU=ERR NOT_IN_SPAMCOP=-1.5 CL_IP_EQ_HELO_IP=-2
(check from: .yahoo.co. - helo: .mail.ukl.yahoo.) FROM_MATCHES_NOT_HELO=1
IN_PM_RFCI=3.2 IN_ABUSE_RFCI=3.2 <client=217.146.182.115>
<helo=web28010.mail.ukl.yahoo.com> <[EMAIL PROTECTED]> <to=>, rate: 0.9
New versions respect now a SENDER MX domain listing which is used
as HELO domain:
info: decided action=PREPEND X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5
NOT_IN_BL_NJABL=-1.5 IX_MANITU=ERR NOT_IN_SPAMCOP=-1.5 CL_IP_EQ_HELO_IP=-2
(check from: .gmail. - helo: .nf-out-0910.google. - helo-domain: .google.)
FROM/MX_MATCHES_HELO(DOMAIN)=-2 RANDOM_SENDER=0.25 IN_ABUSE_RFCI=0.875
<client=64.233.182.191> <helo=nf-out-0910.google.com> <[EMAIL PROTECTED]>
<to=>, rate: -7.375
info: decided action=PREPEND X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5
NOT_IN_BL_NJABL=-1.5 IX_MANITU=ERR NOT_IN_SPAMCOP=-1.5 CL_IP_EQ_HELO_IP=-2
(check from: .yahoo. - helo: .web28010.mail.ukl.yahoo. - helo-domain: .yahoo.)
FROM/MX_MATCHES_HELO(DOMAIN)=-2 IN_PM_RFCI=0.1 IN_ABUSE_RFCI=0.1
<client=217.146.182.115> <helo=web28010.mail.ukl.yahoo.com> <[EMAIL PROTECTED]>
<to=>, rate: -8.3
host -t MX gmail.com lists for instance gmail-smtp-in.l.google.com
which results in a match with the HELO argument.
NOTE: I do believe that this version is now acceptable for an $OS release as
such I will release this version as 0.1.14 beta on 10-28-2006.
--
Robert Felber (PGP: 896CF30B)
Munich, Germany
____________________________________________________________
Policyd-weight Mailinglist - http://www.policyd-weight.org/
