I was able to get my mail server to add a special header for people who
relay mail through me from dialup IPs after having done an SMTP AUTH, so
their mail doesn't get flagged by SA anymore (since I have an SA rule to add
a -100 if the auth header is present)
However, from time to time, I still get SA flagging mails that originated
from a dialup IP and were relayed through the ISP (the way it should have
been)
Will SA penalize a mail if any IP in the received headers is in a DUL or
only if the first line (seen last) Received line has an IP in DUL?
If it's not the second case, and while I understand that a spammer can add
an extra received line to foil the check, I'd like to have SA only check the
originating IP against DULs
Is that possible?
Received: from grinch.txt.com ([192.160.132.10])
by mail2.merlins.org with esmtp (Exim 3.31-VA-mm2 #1 (Debian))
id 16rTQb-0002WN-00
for <[EMAIL PROTECTED]>; Sat, 30 Mar 2002 16:42:37 -0800
Received: from grinch (grinch.txt.com [192.160.132.10])
by grinch.txt.com (8.12.2/8.12.2) with ESMTP id g2V0Yt1o003516;
Sat, 30 Mar 2002 16:34:56 -0800 (PST)
Received: with LISTAR (v1.0.0; list miatamail); Sat, 30 Mar 2002 16:34:54 %z (PST)
Received: from swan.prod.itd.earthlink.net (swan.mail.pas.earthlink.net
[207.217.120.123])
by grinch.txt.com (8.12.2/8.12.2) with ESMTP id g2V0Yp1o003510
for <[EMAIL PROTECTED]>; Sat, 30 Mar 2002 16:34:51 -0800 (PST)
Received: from pool0298.cvx25-bradley.dialup.earthlink.net ([209.179.217.43]
helo=earthlink.net)
by swan.prod.itd.earthlink.net with smtp (Exim 3.33 #1)
id 16rTHw-0004nJ-00
for [EMAIL PROTECTED]; Sat, 30 Mar 2002 16:33:41 -0800
Message-ID: <[EMAIL PROTECTED]>
X-EM-Version: 5, 0, 0, 0
X-EM-Registration: #3003520714B31D032830
X-Priority:
X-Mailer: EarthLink MailBox 5.0.7.9 (Windows)
From: user
To: list
Subject: *****SPAM***** [miatamail] Miata wanted
X-Spam-Status: Yes, hits=7.3 required=7.0
tests=NO_REAL_NAME,X_EM_VER_PRESENT,TO_LOCALPART_EQ_REAL,KNOWN_BAD_DIALUPS,RCVD_IN_DUL,RCVD_IN_OSIRUSOFT_COM
version=2.11
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.11 (devel $Id: SpamAssassin.pm,v 1.68
2002/03/04 01:22:24 hughescr Exp $)
X-Spam-Report: 7.3 hits, 7 required;
* 0.6 -- From: does not include a real name
* 1.5 -- Found an X-Em-Version: header
* 1.0 -- To: repeats local-part as real name
* 0.7 -- Received via known spam-harbouring dialups
* 1.5 -- Received from dialup, see http://www.mail-abuse.org/dul/
[RBL check: found 43.217.179.209.dialups.mail-abuse.org.]
* 2.0 -- Received via a relay in relays.osirusoft.com
[RBL check: found 43.217.179.209.relays.osirusoft.com.]
Status: RO
Content-Length: 881
Lines: 19
--
Microsoft is to operating systems & security ....
.... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/ | Finger [EMAIL PROTECTED] for PGP key
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
