On Tue, 21 Apr 2015 15:56:27 +0200 Matus UHLAR - fantomas wrote: > On 21.04.15 14:08, Mark Martinec wrote: > >In any case, I think that RCVD_ILLEGAL_IP should not be adding > >score points if it sees an 0.0.0.0/8 address in a Received header > >field. > > Why not? Should not it depend mostly on what masscheck say?
The reason is that the FPs are on 0/8, which is only a small part of the total address space. Without it the rule could still hit ~96% of the spam, but would warrant a much higher score.
