[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-devel
Subject:    [Bug 6022] False positives on TVD_RCVD_IP and TVD_RCVD_IP4 rules on
From:       bugzilla-daemon () issues ! apache ! org
Date:       2010-04-22 12:42:13
Message-ID: 201004221242.o3MCgDv1015157 () thor ! apache ! org
[Download RAW message or body]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6022

--- Comment #5 from John Wilcock <john@tradoc.fr> 2010-04-22 08:42:07 EDT ---
(In reply to comment #4)
> I've also realised that the TVD_RCVD_IP rules have significant overlap with
> FH_HELO_EQ_D_D_D_D which already uses X-Spam-Relays-External. 
> 
> Perhaps the best course of action is actually to delete TVD_RCVD_IP and
> TVD_RCVD_IP4 ?

Damn, hit send too soon. 

To be more precise, TVD_RCVD_IP overlaps with FH_HELO_EQ_D_D_D_D and/or
HELO_DYNAMIC_IPADDR2 and/or HELO_DYNAMIC_SPLIT_IP on all actual spam I see
here.  All of these are high-scoring rules, and TVD_RCVD_IP should probably
therefore be deleted. 

I don't see any hits for TVD_RCVD_IP4 as I block non-authenticated naked IPs at
SMTP time, before SA gets a look at the message, but if the corpora show that
it is worth keeping it should no doubt be updated to use
X-Spam-Relays-External.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[prev in list] [next in list] [prev in thread] [next in thread]