Bug 5767 - FP on RCVD_NUMERIC_HELO
Summary: FP on RCVD_NUMERIC_HELO
Status: RESOLVED INVALID
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Plugins (show other bugs)
Version: 3.2.3
Hardware: Other other
: P5 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-01-06 13:23 UTC by Michael Scheidell
Modified: 2011-05-01 22:16 UTC (History)
1 user (show)



Attachment Type Modified Status Actions Submitter/CLA Status

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Scheidell 2008-01-06 13:23:24 UTC
I looked at .pm and could not tell where this was going wrong:
(yes, 127.0.0.1 is in local/trusted, can't do anything without it can I?)
two examples: one with FP, and one fine.
both done with same server, same local.cf/configs, etc.

this one had FP:  every one this sender sends me has the FP.
why does regex match this?
cmsout03.mbox.net


X-Envelope-From: <sender@usa.net>
X-Envelope-To: <scheidell@secnap.net>
X-Quarantine-ID: <1iVHZ3n+GJ3W>
X-Spam-Flag: NO
X-Spam-Score: 0.806
X-Spam-Level: 
X-Spam-Status: No, score=0.806 tag=-999 tag2=5 kill=10 tests=[AWL=0.405,
        BAYES_00=-2.599, RCVD_IN_SORBS=1, RCVD_NUMERIC_HELO=2]
Received: from fl.us.spammertrap.net ([127.0.0.1])
        by localhost (fl.us.spammertrap.net [127.0.0.1]) (amavisd-new, port 10024)
        with LMTP id 1iVHZ3n+GJ3W for <scheidell@secnap.net>;
        Sun,  6 Jan 2008 16:02:01 -0500 (EST)
Received: from cmsout03.mbox.net (cmsout03.mbox.net [165.212.64.33])
        by fl.us.spammertrap.net (Postfix) with ESMTP id EE48B2E11E
        for <scheidell@secnap.net>; Sun,  6 Jan 2008 16:02:00 -0500 (EST)
Received: from cmsout03.mbox.net (cmsout03.mbox.net [165.212.64.33])
        by cmsout03.mbox.net (Postfix) with ESMTP id 48D6D5BD0;
        Sun,  6 Jan 2008 21:02:00 +0000 (GMT)


this one is fine:
X-Envelope-From: <sender@gmail.com>
X-Envelope-To: <scheidell@secnap.net>
X-Quarantine-ID: <F9hgDWMmVnYs>
X-Spam-Flag: NO
X-Spam-Score: -2.917
X-Spam-Level: 
X-Spam-Status: No, score=-2.917 tag=-999 tag2=5 kill=10 tests=[AWL=0.182,
        BAYES_00=-2.599, DKIM_SIGNED=0.001, DKIM_VERIFIED=-0.5,
        SPF_PASS=-0.001]
Received: from fl.us.spammertrap.net ([127.0.0.1])
        by localhost (fl.us.spammertrap.net [127.0.0.1]) (amavisd-new, port 10024)
        with LMTP id F9hgDWMmVnYs for <scheidell@secnap.net>;
        Sun,  6 Jan 2008 15:46:13 -0500 (EST)
Received: from rv-out-0910.google.com (rv-out-0910.google.com [209.85.198.191])
        by fl.us.spammertrap.net (Postfix) with ESMTP id E4CF02E11D
        for <scheidell@secnap.net>; Sun,  6 Jan 2008 15:46:12 -0500 (EST)
Comment 1 Sidney Markowitz 2008-01-06 14:13:24 UTC
When I copy the headers into an email message I do not get the same results. Can
you process an email that demonstrates the problem using spamassassin -D and
attach the results after sanitising any personal information such as the
sender's email address?
Comment 2 Sidney Markowitz 2008-01-07 11:54:30 UTC

*** This bug has been marked as a duplicate of 5666 ***
Comment 3 Sidney Markowitz 2008-01-07 11:55:15 UTC
whoops, closed wrong bug
Comment 4 Henrik Krohns 2011-05-01 22:16:54 UTC
Closing unconfirmed bug for old version.