FWIW, it's hard to tell what's going on without *all* the Received headers. It should be fine, assuming the received hdrs are normal (apart from the HTTP vs SMTP difference). Here's what 2.60cvs doc says about using check_rbl:
=item Selecting all IPs except for the originating one
This is accomplished by naming the set 'foo-notfirsthop'. Useful for querying against DNS lists which list dialup IP addresses; the first hop may be a dialup, but as long as there is at least one more hop, via their outgoing SMTP server, that's legitimate, and so should not gain points. If there is only one hop, that will be queried anyway, as it should be relaying via its outgoing SMTP server instead of sending directly to your MX.
Yep. That's what one of the RBLs (can't remember which, and the thread is now disjointed) was complaining about.
"2.60cvs doc" would seem to equal "man Mail::SpamAssassin::Conf" for 2.60-CVS. Would the above addition to local.cf modify the query behavior for *other* RBLs? Because only one RBL check mentions not using the IP's ISP for relaying. It would be good if the behavior for the other RBL checks could be modified by this rule.
Just as a footnote, I'm continually finding myself utterly breathless at what my combination of Postfix 2.0.13-20030706 (real-time smtp rejecting yet at the same time saving the rejected mail to my quarantine directory) amavisd-new SA 2.60-CVS is doing. It's unbelievably brilliant. Not that I haven't got my own scores and rules in my site-wide local.cf (and continually monitor and adapt,) but only a single - innocent - spam per 100% received is beating it, at the moment. And spam proffered is definitely exponentially on the increase.
Best,
Tony
-- Tony Earnshaw
Sometimes I'd rather read top-posted messages. I wonder why ...
http://j-walk.com/blog/docs/conference.htm http://www.billy.demon.nl Mail: [EMAIL PROTECTED]
------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here: http://www.vmware.com/wl/offer/345/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
