Hi,

I'm seeing a lot of FPs involving FSL_HELO_HOME due to its extremely high score:

 *  3.7 FSL_HELO_HOME No description available.

Is that score really warranted? For example:

Received: from host82.torus.pl (91.209.116.82) (HELO [192.168.20.7])
 by sedan1.home.pl (89.161.160.215) with SMTP (IdeaSmtpServer v0.80.2)
 id 74a9561edc57ecb3; Wed, 11 May 2016 09:57:10 +0200

It appears to be triggered based on the "home" in the hostname?

What was the intention of this rule? To catch mail with "home" in the
HELO string?

This seems to be quite prevalent with mail received from abroad.
Perhaps they just do things differently there or something??

Reply via email to