There seems there might be a glitch in the detection of trusted relays which is causing RBL checks to be bypassed.
Is there a way to bypass the autodetection of trusted relays and use only ones specified in a .cf file? I searched bugzilla and didn't see the same problem I'm seeing.
should I open a bugzilla ticket? I didn't see this in the bugzilla database, then again, my skills at querying it is not the greatest.
Spamassassin version 2.60
net::dns is installed
OS Mandrake Linux 9.1
MTA Postfix 1.1.13
Spamassassin is behind a NAT translated firewall, and has a private address. (192.168.100.3)
I have no trusted relays, as this plays inbound gateway, I trust no one, but it looks like because my server uses my internal DNS server, it finds that my host resolves to an internal IP (which is correct), then it assumes that the relay is trusted and skips all rbl checks.
This is a sample header: (note I changed the destination address)
------------------
From [EMAIL PROTECTED] Tue Oct 7 17:45:12 2003
Return-Path: <[EMAIL PROTECTED]>
Received: from cleverconsumers.com (mx41.cleverconsumers.com [64.191.9.41])
by mail2.someplace.com (Postfix) with SMTP id 045F89F101
for <[EMAIL PROTECTED]>; Tue, 7 Oct 2003 17:45:09 -0400 (EDT)
Content-Type: multipart/alternative; boundary="----------=_1065540450-9705-0"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.411 (Entity 5.404)
To: <[EMAIL PROTECTED]>
Received: from img.cleverconsumers.com by cleverconsumers.com id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Tue, 7 Oct 2003 21:00:11 GMT
From: "Miracle Device" <[EMAIL PROTECTED]>
Subject: Prevent Amber Alerts: Do you know where your children are?
Date: Tue, 7 Oct 2003 21:00:11 GMT
Message-Id: <[EMAIL PROTECTED]>
Errors-To: <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
List-Unsubscribe: <http://www.cleverconsumers.com/unsub.php?id=HIBHFAGGB5IJI600>
,
<mailto:[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.60-contentcatcher
(1.212-2003-09-23-exp) on pf2.contentcatcher.com
X-Spam-Level: *******************
X-Spam-Status: Yes, hits=19.4 required=5.0 tests=BAYES_99,CC_EMAILINURL_1,
CC_HTTPPORTODD_1,DO_IT_TODAY,EXCUSE_19,FROM_ENDS_IN_NUMS,
HTML_IMAGE_RATIO_08,HTML_MESSAGE,LIMITED_TIME_ONLY,LINES_OF_YELLING,
MIME_QP_NO_CHARSET,NORMAL_HTTP_TO_IP,ONLY_COST autolearn=no
version=2.60-contentcatcher
X-Spam-Report:
* 1.0 FROM_ENDS_IN_NUMS From: ends in numbers
* 4.0 ONLY_COST BODY: Only $$$
* 1.0 DO_IT_TODAY BODY: Do it Today
* 0.2 LIMITED_TIME_ONLY BODY: Offers a limited time offer
* 2.0 EXCUSE_19 BODY: Claims you opted-in or registered
* 0.1 HTML_MESSAGE BODY: HTML included in message
* 0.4 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area
* 1.0 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED
* 5.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 0.2 MIME_QP_NO_CHARSET RAW: Quoted-printable inline text with no charset
* 1.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL
* 0.5 CC_EMAILINURL_1 URI: Contains what appears to be an Email Address in URL
* 2.5 CC_HTTPPORTODD_1 URI: Link to a non standard port 80 host
---------------------
This is associated output from spamassassin -D
debug: Score set 3 chosen.
debug: Initialising learner
debug: received-header: parsed as [ ip=64.191.9.41 rdns=mx41.cleverconsumers.com helo=cleverconsumers.com by=pf2.contentcatcher.com ident= ]
debug: dns_available set to yes in config file, skipping test
debug: received-header: 'by' mail2.someplace.com has reserved IP 192.168.101.3
debug: received-header: 'by' mail2.someplace.com has reserved IP 192.168.100.3
debug: received-header: 'by' mail2.someplace.com has no public IPs
debug: received-header: relay 64.191.9.41 trusted? yes
debug: is Net::DNS::Resolver available? yes
debug: all '*From' addrs: [EMAIL PROTECTED] [EMAIL PROTECTED]
debug: running header regexp tests; score so far=0
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
