Drew Tomlinson a écrit : > [snip] > > OK, I think I understand now. uribl is a way to check mail content for > domains that *appear* in spam, not from where the mail is sent. Good > idea! I will see about adding that to SpamAssassin. >
yes. and also consider adding the BRBL (Barracuda DNSBL) to your spamassassin setup. header RCVD_IN_BRBL eval:check_rbl('brbl-lastexternal', 'bb.barracudacentral.org.') describe RCVD_IN_BRBL Received via a relay in Barracuda BRBL tflags RCVD_IN_BRBL net score RCVD_IN_BRBL 3 can you show the headers of the spam you cited in your OP? (don't include the body). you can remove all Received headers and recipient headers (Delivered-To, To, Cc, ...).