Re: SPAM through postfix+postscreen

2013-11-13 Thread Benny Pedersen
HL skrev den 2013-11-13 13:01: "Why did this spam passed through ???"  postscreen is not yet a spoof protector https://launchpad.net/pypolicyd-spf

Re: SPAM through postfix+postscreen

2013-11-13 Thread Benny Pedersen
Paul C skrev den 2013-11-13 11:52: From what I see from the spam scoring, you have a -100 from the domain being whitelisted, i.e. google.com [4] in your example. This gave the total spam score a value of less than 0, and based on the header it if pypolicyd-spf was used in mta stage this mail wa

Re: SPAM through postfix+postscreen

2013-11-13 Thread Benny Pedersen
HL skrev den 2013-11-13 11:41: X-Spam-Status: No, score=-88.74 required=6.31 tests=[BAYES_80=2, FILL_THIS_FORM=0.001, FILL_THIS_FORM_LONG=3.404, HELO_DYNAMIC_IPADDR=1.951, SPF_SOFTFAIL=0.665, URIBL_BLACK=1.725, URIBL_RHS_DOB=1.514, USER_IN_WHITELIST=-100] autolearn=no

Re: SPAM through postfix+postscreen

2013-11-13 Thread Kris Deugau
HL wrote: > On 13/11/2013 12:52 μμ, Paul C wrote: >> From what I see from the spam scoring, you have a -100 from the domain >> being whitelisted, > But there seem to be a zillion mail servers out there that do not comply > with the RFC, > > most of the times DNS and Reverse DNS and IP ADDRESSES a

Re: SPAM through postfix+postscreen

2013-11-13 Thread Stan Hoeppner
On 11/13/2013 5:38 AM, Wijatmoko U. Prayitno wrote: > On Wed, 13 Nov 2013 05:52:28 -0500 > Paul C wrote: > >> ip and helo name do not match google. I don't use those content filters to >> know enough to tell you what to do, but that's why the emails are getting >> in. I'd be interested in hearing

Re: SPAM through postfix+postscreen

2013-11-13 Thread HL
On 13/11/2013 12:52 μμ, Paul C wrote: From what I see from the spam scoring, you have a -100 from the domain being whitelisted, i.e. google.com in your example. This gave the total spam score a value of less than 0, and based on the header it says a 6.31 score or higher woul

Re: SPAM through postfix+postscreen

2013-11-13 Thread Wijatmoko U. Prayitno
On Wed, 13 Nov 2013 05:52:28 -0500 Paul C wrote: > ip and helo name do not match google. I don't use those content filters to > know enough to tell you what to do, but that's why the emails are getting > in. I'd be interested in hearing the solution to this as well. > you could try http://www.ha

Re: SPAM through postfix+postscreen

2013-11-13 Thread Paul C
>From what I see from the spam scoring, you have a -100 from the domain being whitelisted, i.e. google.com in your example. This gave the total spam score a value of less than 0, and based on the header it says a 6.31 score or higher would cause the message to be blocked. So the spammer is spoofing