text_combined: qydlqcwsiacfymissuesapacheorg httpissuesapacheorgspamassassinshow_bugcgiid5817 additional comments qmitxmehrudersportde 20080213 1726 reply comment 7 rule 70_othercf file sandbox available via svn ah thanks rule checks suspected forged received headers checking external received headers contain dotquads duplicated one another hence name dos_forged_rcvd_quads rule sendmailish specific relies ip rdns examples ips rdns rule wouldnt fire ive added generic version rule dos_rcvd_ip_twice fire examples fwiw could implement plugin via couple rules achieve result id either hopefully itll self documenting least document youre trying achieve plugin damn quite efficient demotivating youre probably right one could accomplish rules forgot meta header entirely started hacking doh however quite significant differences rule mentioned plugin first explicitely limit untrusted relays exactly 2 dont want fp mail processing generating external entities like mailing list server automatic notifications kind including bugzilla dont want catch anything chain actually direct mua mx msgs second forged relay also even resulted 03 fp hits might much unsatisfying suboptimal checking remaining info helo seemed key nonempty nonip helo almost exclusivly characeristic ham eliminating fps resulting mere 1 less accuracy spam btw ham corpus consists directly sent mail mailing list stuff something sure would hit constraint exactly 2 untrusted relays confident pluginrule currently score 30 given test results trick seems rather new get around mua mx style rules sure hit galore especially current wave low scoring spam read almost hits bayes regarding documentation sure meant publish early get discussion opinions already wrote doc however mostly suited reminder plugin would welcome accepted ill invest work document inline point details figured discussion sufficient documenting reasoning also still quite fun rather positive trying stunt rules would harder least receiving mail assignee bug watching assignee tue 05 aug 2008 160857 0800 bug 5817 poorly faked mta received headers plugin