Am 04.02.2015 um 21:51 schrieb Noel Jones:
On 2/4/2015 2:37 PM, li...@rhsoft.net wrote:
it don't matter if it matches - if you are coming with such a PTR
you are rejected - on my setup this is skipped at least if the
envelope domain has a SPF policy listing that IP or if you are on
one of 11 public DNSWL
ptr-check.sh 50-253-254-9-static.hfc.comcastbusiness.net
REJECT Generic DNS-Reverse-Lookup (PTR-Rule: 417) see
http://www.emailtalk.org/ptr.aspx or configure
http://en.wikipedia.org/wiki/Sender_Policy_Framework
Your server, your rules. Thankfully this sort of incoming rule
isn't widespread.
*sadly* that sort of incoming rules is not widespreaded enough,
otherwise spam from infected botnet zombies would no longer exist and
frankly the rule for "IP....hfc.comcastbusiness.net" is manually written
by look at the incoming junk amount all day long hitting the
contentfilter and no single legit mail without SPF/DNSWL over months
/^[\.\-]?([0-9]{1,3}[\.\-]){2,4}[\.\-]?[a-z]{4,20}[\.\-]hfc[\.\-]comcastbusiness[\.\-](co|com|net|org)$/
REJECT Generic DNS-Reverse-Lookup (PTR-Rule: 435) see
http://www.emailtalk.org/ptr.aspx or configure
http://en.wikipedia.org/wiki/Sender_Policy_Framework
even if it is not a directly reject *every* SpamAssassin setup on this
planet gives you a penalty for such a PTR and that maybe the last piece
needed for a milter-reject - in that case you don't know the reasons,
with the reject above you do
score RDNS_DYNAMIC 2.639 0.363 1.663 0.982
score NO_RDNS_DOTCOM_HELO 3.100 0.433 3.099 0.823
if a postmaster is not able to
* care about a PTR not containing an IP
* care about make it on one of the many DNSWL
* setup SPF properly
he don't care about relieable delivery, otherwise he would at least use
a sane relay-host
Which reminds me that the OP should register his domain and IP on
dnswl.org (free and easy)
junkemailfilter.com LISTED 127.0.0.5
exists for our range even without do anything
permit_dnswl_client hostkarma.junkemailfilter.com=127.0.0.[1;3;5]
__________________________________________
ips.whitelisted.org
list.dnswl.org
wl.mailspike.net
iadb.isipp.com
sa-accredit.habeas.com
dnswl.inps.de
swl.spamhaus.org
junkemailfilter.com
