On Wed, 24 Sep 2003, Terry Milnes wrote: > This may be a little difficult to explain but here goes. > > All of my systems are behind a nat box. My mail server OS is linux, > using qmail/vpopmail/mysql procmail etc.etc.. > > Upgraded to Spamassassin V 2.60 rc6 (the day before the final release) > > My daughter's system is on the same network as my mail server. She uses > outlook express, her SMTP and POP servers are set up to use aloak.ca. > Aloak Servers are not on any dynamic ip block. > > She sends me a message (to [EMAIL PROTECTED]) and spamassassin is > marking it as RCVD_IN_DYNABLOCK. > > Now if she sends me a message to [EMAIL PROTECTED] (which is forwarded to > [EMAIL PROTECTED]) the RCVD_IN_DYNABLOCK is not tagged. > > Yes my IP address could be considered to be in a dial up block, and as > such I could expect outgoing mail routed through my SMTP server to be > tagged as such. However if I use another SMTP server that is NOT in a > dial up block, surely it should not be marked as such, even if the > RECIPIENT is in a dial up block. > > Anybody have any ideas what could be causing this? > > TIA Terry.... big snip...
I'm no expert on this but SA 2.60 is now checking the dynablock RBL. These guys are hitting on any dynamic ip's or blocks of ip's that belong to ISP's who don't want servers on their network or any one on a dailup connection. If you check their website they claim that 90% of the spam originates from misconfigured home users connected to cable or dsl. SA 2.60 is giving a dynablock hit a wopping 2.62 score!!! It isn't really a problem that your SA is hitting this rule (you can always turn it off). The real problem is that everyone else's SA 2.60 is doing the same. If they retain the default 7 spam score then your message is already more than a third of the way to being marked as spam. Since many reduce the default to something like 5 then you're over half way to being spam. Do a host lookup on the two names in question. interface.on.ca will return 65.48.80.27. This is actually a Rogers Cable ip. That's why you're being tagged. The Rogers agreement specifically denies servers on their network. dynablock has included all their ip's. You can get around this by using your Roger's smtp server instead of your own. aloak.ca returns 216.220.38.194 which is a valid server in the aloak.ca domain. That's why it passes. Personally, I have very mixed feelings about these RBL's. Many have been irresponsible in the way they include ip's (your ip could suddenly appear on a list and it was next to impossible to get it removed...I've had bad experience with one). If it was up to me I'd get rid of them all but virtually everyone uses them...even me! -- Gerry "The lyfe so short, the craft so long to learne" Chaucer ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
