Re: Parsing Received Headers

Bret Miller wrote:
> Received: from [206.74.184.2] (HELO [206.74.184.2])
> by mail.wcg.org (CommuniGate Pro SMTP 5.1.11)
> ...
> Meaning that there was no RDNS for 206.74.184.2 and when it said helo, it
> said "HELO [206.74.184.2]". However, SA is not parsing it that way. So, can
> anyone tell me how to write the received header so SA understands it?

Hmm... I think if you replace "HELO" with "unknown" that it might parse. I did not look at the SA parsing rules but a typical MTA would have placed "unknown" there instead of the HELO. I would try that. A typical MTA would place an unresolving line such as this following:

  Received: from localhost.localdomain (unknown [127.0.0.1])

The part after the "from" would be the verbatim string from the HELO exchange. It can't really be trusted. But the RDNS part as you observed should not be HELO.

Just guessing here...

Bob Received on Sat Sep 1 15:42:39 2007