text_combined: qydlqcwsiacfymissuesapacheorg httpissuesapacheorgspamassassinshow_bugcgiid5817 additional comments qmitxmehrudersportde 20080221 1453 boo chris confirmed single fp total 120k hams valid human composed message using real mua important part data changed xspamrelaysuntrusted ip1111 rdnsabcnet heloabcnet byexamplecom ip1111 rdnsabcnet helo1111 byabcnet idk1g0v noticed two differences one ham spam smallish adhoc testing corpus matched previous rule rdns untrusted hops identical first hops b first hop id going metarule added another constraint turned much sharper result less hits notable exception fp subrule true second hops rdns equal first hops header __rdns_eq_by xspamrelaysuntrusted rdns by1 note actualy checks recent untrusted relays first second hop due existing subrule __relays_three_plus new metarule meta forged_relay_mua_to_mx __a __b __c __rdns_eq_by reference probably discussion tested rule checks rdns first hop turned subset missing 1 ham 1 spam original naive attempt see comment 8 still serves testing corpus messages hit forged_relay_mua_to_mx anyway neither discussed rules results metarule smallish test corpus identical since unsure result heres variant testing first hops data reference maybe someone else tell better one use header rdns_eq_by xsru rdns by1 receiving mail assignee bug watching assignee thu 07 aug 2008 075851 0800 bug 5817 poorly faked mta received headers mua mx