From 65c8a661989e22dadc08e5f5bdd60889c3b8ffcb Mon Sep 17 00:00:00 2001
From: twesterhever <40121680+twesterhever@users.noreply.github.com>
Date: Sun, 24 Mar 2024 17:48:53 +0000
Subject: [PATCH] [Minor] Add rule for localhost HELOs in Received headers

---
 rules/regexp/headers.lua | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/rules/regexp/headers.lua b/rules/regexp/headers.lua
index 5f6a49437..6f163bcd1 100644
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@ -800,6 +800,13 @@ reconf['INVALID_POSTFIX_RECEIVED'] = {
   group = 'headers'
 }
 
+reconf['RECEIVED_HELO_LOCALHOST'] = {
+  re = 'Received=/from (localhost|\\[127\\.0\\.0\\.1\\])\\s+/X',
+  score = 0.0,
+  description = 'Localhost HELO seen in Received header',
+  group = 'headers'
+}
+
 reconf['X_PHP_FORGED_0X'] = {
   re = "X-PHP-Originating-Script=/^0\\d/X",
   score = 4.0,
-- 
2.39.5