Re: DNS_FROM_OPENWHOIS always triggers

2010-08-11 Thread Noel Jones
On Wed, Aug 11, 2010 at 9:58 AM, Alex wrote: ... > I did notice this one header discrepancy: > > Received: by mail.mydomain.net (Postfix, from userid 78) > > What's with the "Postfix, from user 78)"? This should be the server's > IP address, no? That header is normal when you're using a "simple"

Re: DNS_FROM_OPENWHOIS always triggers

2010-08-11 Thread Alex
Hi, >> > Forgot to mention: After running sa-update WRT 3.2. >> >> Great, thanks so much. > > Well, you *did* run sa-update since then, no? I mean, at the very least > early this year. Begs the question, why you still do have that rule. It's another system that I just adopted, and haven't finishe

Re: DNS_FROM_OPENWHOIS always triggers

2010-08-11 Thread Karsten Bräckelmann
On Wed, 2010-08-11 at 11:51 -0400, Alex wrote: > > > Bug 6157 [1], remove open-whois.org rules since domain is cybersquatted. > > > > > > The rule has been removed a *year* ago, and is neither part of 3.3, nor > > > 3.2 stock rules. > > > > Forgot to mention: After running sa-update WRT 3.2. > >

Re: DNS_FROM_OPENWHOIS always triggers

2010-08-11 Thread Alex
>> Bug 6157 [1], remove open-whois.org rules since domain is cybersquatted. >> >> The rule has been removed a *year* ago, and is neither part of 3.3, nor >> 3.2 stock rules. > > Forgot to mention: After running sa-update WRT 3.2. Great, thanks so much. Best, Alex

Re: DNS_FROM_OPENWHOIS always triggers

2010-08-11 Thread Karsten Bräckelmann
On Wed, 2010-08-11 at 17:24 +0200, Karsten Bräckelmann wrote: > On Wed, 2010-08-11 at 10:58 -0400, Alex wrote: > > How does DNS_FROM_OPENWHOIS work? I have a system where every message > > triggers on DNS_FROM_OPENWHOIS and I can't figure out why. > > Bug 6157 [1], remove open-whois.org rules sinc

Re: DNS_FROM_OPENWHOIS always triggers

2010-08-11 Thread Karsten Bräckelmann
On Wed, 2010-08-11 at 10:58 -0400, Alex wrote: > How does DNS_FROM_OPENWHOIS work? I have a system where every message > triggers on DNS_FROM_OPENWHOIS and I can't figure out why. Bug 6157 [1], remove open-whois.org rules since domain is cybersquatted. The rule has been removed a *year* ago, and