Re: Match sending IP rdns name?

Bill Cole <[email protected]>
Newsgroups gmane.mail.spam.spamassassin.general
Message-ID <[email protected]>
On 2025-06-24 at 08:00:04 UTC-0400 (Tue, 24 Jun 2025 14:00:04 +0200)
Benoit Panizzon <[email protected]>
is rumored to have said:

> Hi Mark
>
> Thank you, but my question was, how to match the rdns name of the
> source IP.
>
> Well i found out the header matcher can also match Received: header
> lines.
>
> header          IMP_RECV_SHOP          Received =~ /\.shop\ /
> score           IMP_RECV_SHOP          10
> describe        IMP_RECV_SHOP          Received: from shop TLD
>
> This works for me.

Note that there are also subsets of Received headers with fields parsed 
out that you can use, see `perldoc Mail::SpamAssassin::PerMsgStatus` for 
a discussion of all of the available "pseudo-headers." There are 
examples in existing rules.


-- 
  Bill Cole
  [email protected] or [email protected]
  (AKA @[email protected] and many *@billmail.scconsult.com 
addresses)
  Not Currently Available For Hire
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.