RelayEvalPlugin

Check the data parsed from ReceivedParser against different rules.

Evaluate a set of rules against “Received” headers, they are form a list of all the servers/computers through which the message traveled in order to reach the destination.

Example usage

loadplugin pad.plugins.relay_eval.RelayEval

header RCVD_HELO_IP_MISMATCH        eval:helo_ip_mismatch()
describe RCVD_HELO_IP_MISMATCH      Received: HELO and IP do not match, but should

header RCVD_NUMERIC_HELO    eval:check_for_numeric_helo()
describe RCVD_NUMERIC_HELO  Received: contains an IP address used for HELO

header __FORGED_RCVD_TRAIL  eval:check_for_forged_received_trail()

header NO_RDNS_DOTCOM_HELO  eval:check_for_no_rdns_dotcom_helo()
describe NO_RDNS_DOTCOM_HELO        Host HELO'd as a big ISP, but had no rDNS

Usage

This plugin only has EVAL methods. See Eval Rule for general details on how to use such methods.

Options

None

EVAL rules

Tags

None