qydlqcwsiacfymissuesapacheorg httpissuesapacheorgspamassassinshow_bugcgiid5817 qmitxmehrudersportde changed removed added summarypoorly faked mta received poorly faked mta received headers plugin headers mua mx additional comments qmitxmehrudersportde 20080215 0416 thanks daryl although hope didnt believe id hack right away matter time shortly last comment got first rule somewhat working mostly testing wait today two variants forged relay mua mx ordinary rules header forged_relay_mua_to_mx xspamrelaysuntrusted ip127d ip1 helo127 __relays_ip_match __relays_three_plus __relay_mua_helo_ip_or_none respectively shortened avoid wrapping header __a xspamrelaysuntrusted ip127d ip1 header __b xspamrelaysuntrusted 3 header __c xspamrelaysuntrusted helo127 meta forged_relay_mua_to_mx __a __b __c quite embarrassing though least wouldnt easy spot constraint helo ip without custom dbg printing plugin anyway three variants result exact hits test corpora caveat similar original rule doesnt check ip_private localhosts simplicity long names broken chunks meta rule pretty self explanatory ensure three constraints satisfied ips two untrusted relays identical exactly two untrusted relays first relays helo either nonlocalhost ip none btw checked wrong relays helo receiving mail assignee bug watching assignee tue 05 aug 2008 212852 0800 bug 5817 poorly faked mta received headers mua mx