Check the first two lines of the header: Return-path: <[EMAIL PROTECTED]> Received: from router ([192.168.1.8])
It looks like it was able to spoof amazon.com, which would explain why it got whitelisted. If I'm reading this correctly, the first hop was to an internal router (probably with its own fake DNS entry for amazon.com) which allowed the original host to pretend to be amazon.com. Does this look correct? Ryan -----Original Message----- From: Simon Byrnand [mailto:[EMAIL PROTECTED] Sent: Sunday, June 22, 2003 8:16 PM To: Bernd Kuhls; [EMAIL PROTECTED] Subject: Re: [SAtalk] Spam got score -80.6 - Spamassassin 2.55 At 00:41 23/06/03 +0200, Bernd Kuhls wrote: >Hi, > >got this nice baby: > >Greetings, Bernd [snip] Just wondering, how exactly does posting a copy of that message to this list help anyone ? a) There is no indication of what version of SpamAssassin processed the message, its not even obvious that it is even SpamAssassin b) There is no X-Spam-Status header, so we can't see what tests triggered and what didn't c) The score of -80.6 suggests that it triggered the USER_IN_WHITELIST rule which has a score of -100, but because of a lack of further information its impossible to know... Regards, Simon ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
