Re: Malformed envelope-from triggering RP_MATCHES_RCVD

2013-08-13 Thread Adrian Gruntkowski
W dniu 13.08.2013 15:00, RW pisze: On Tue, 13 Aug 2013 08:38:50 -0400 Alex wrote: Hi, Recently I got a pump-and-dump spam that got through because of a significant score amount being subtracted by matching the RP_MATCHES_RCVD rule. Many of us have reduced that rule to a very low score for th

Re: Malformed envelope-from triggering RP_MATCHES_RCVD

2013-08-13 Thread RW
On Tue, 13 Aug 2013 08:38:50 -0400 Alex wrote: > Hi, > > > Recently I got a pump-and-dump spam that got through because of a > > significant > > score amount being subtracted by matching the RP_MATCHES_RCVD rule. > > Many of us have reduced that rule to a very low score for this reason. > Too ma

Re: Malformed envelope-from triggering RP_MATCHES_RCVD

2013-08-13 Thread Alex
Hi, > Recently I got a pump-and-dump spam that got through because of a > significant > score amount being subtracted by matching the RP_MATCHES_RCVD rule. Many of us have reduced that rule to a very low score for this reason. Too many legitimate mail servers lack a proper rDNS. score RP_MATCHES

Malformed envelope-from triggering RP_MATCHES_RCVD

2013-08-13 Thread Adrian Gruntkowski
Hello, Recently I got a pump-and-dump spam that got through because of a significant score amount being subtracted by matching the RP_MATCHES_RCVD rule. When investigating the headers, I've observed the following: ... Received: from unknown (HELO localhost) (ed...@hiwaay.net@223.229.72.179)