> Bret Miller wrote:
> > Received: from [206.74.184.2] (HELO [206.74.184.2])
> >      by mail.wcg.org (CommuniGate Pro SMTP 5.1.11)
> > ...
> > Meaning that there was no RDNS for 206.74.184.2 and when it said helo, it
> > said "HELO [206.74.184.2]". However, SA is not parsing it that way. So, can
> > anyone tell me how to write the received header so SA understands it?

On 01.09.07 13:41, Bob Proulx wrote:
> Hmm...  I think if you replace "HELO" with "unknown" that it might
> parse.  I did not look at the SA parsing rules but a typical MTA would
> have placed "unknown" there instead of the HELO. 

as far as I understand it, the string in parentheses is the helo string and
that's why is HELO there. Typical MTA places helo string before parentheses
and RDNS and/or IP between them. Seems this is the opposite case.

>  I would try that.  A
> typical MTA would place an unresolving line such as this following:
> 
>   Received: from localhost.localdomain (unknown [127.0.0.1])
> 
> The part after the "from" would be the verbatim string from the HELO
> exchange.  It can't really be trusted.  But the RDNS part as you
> observed should not be HELO.
-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
If Barbie is so popular, why do you have to buy her friends? 

Reply via email to