Re: [exim] Exim always expands sender_rcvhost to unverified …

Top Page
Delete this message
Reply to this message
Author: Bill Cole
Date:  
To: Evgeniy Berdnikov via Exim-users
Subject: Re: [exim] Exim always expands sender_rcvhost to unverified IP
On 2021-11-16 at 17:03:14 UTC-0500 (Wed, 17 Nov 2021 01:03:14 +0300)
Evgeniy Berdnikov via Exim-users <bd4@???>
is rumored to have said:

> On Tue, Nov 16, 2021 at 03:11:50PM -0500, Matt Corallo via Exim-users
> wrote:
>> The way I was (apparently incorrectly?) interpreting a similar
>> expansion
>> here is that the host was not verified via FcRDNS due to the presence
>> of the
>> square brackets in the parenthetical. Apparently that is the way
>> Spamassasin
>> is also interpreting the same received line, marking all mails as "no
>> verified RDNS".
>
> Sounds strange... Your original mail passed my Spamassasin with this
> result:
>
> X-Spam-Flag: NO
> X-Spam-Score: -0.09
> X-Spam-Level:
> X-Spam-Status: No, score=-0.09 tagged_above=-100 required=4.7
>         tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1, DKIM_SIGNED=0.1,
>         DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
>         MAILING_LIST_MULTI=-1, MONEY_CONTENT_02=2, MONEY_CONTENT_02=2,
>         SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_FOREIGN_FROM=0.01]
>         autolearn=no autolearn_force=no

>
> Here "MONEY_CONTENT_02" is my own test, it catched two "bitcoin"
> words
> in line "id=bitcoin/bitcoin/pull/23496/review/807558392@???"
> from your mail. But RDNS is not mentioned, dispite of header
> "Received: from hummus.exim.org ([37.221.193.62]:49438)".


Whether SA cares about rDNS indicators in a Received header is a
function of whether the local config (internal_networks and
trusted_networks) causes that Received header to be identified by SA as
the last one which records the transfer from an external host to a host
which is "trusted" in the sense that it is believed to write accurate
Received headers.

> Have you X-Spam-Status: records in received mails? Do they mention
> RDNS?


Matt posted a sample in the SpamAssassin Users list:
https://mail-archives.apache.org/mod_mbox/spamassassin-users/202111.mbox/%3c0eca22eb-9c51-becf-579f-ac8017b8c5dd@bluematt.me%3e



--
Bill Cole
bill@??? or billcole@???
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire