I'me getting more than a few spams which should be caught by dnsbls at
the SMTP level. Like:
>From [EMAIL PROTECTED] Tue Nov 25 18:51:33 2003
Return-Path: <[EMAIL PROTECTED]>
Received: from cpe-66-68-241-177.rgv.rr.com
(cpe-66-68-241-177.rgv.rr.com
+[66.68.241.177])
by mail.sdsitehosting.net (8.12.10/8.12.10) with SMTP id
hAQ2pWI8010253
for <[EMAIL PROTECTED]>; Tue, 25 Nov 2003 18:51:32 -0800
Received: from [38.228.103.191] by cpe-66-68-241-177.rgv.rr.com with
SMTP; Tue,
+25 Nov 2003 23:53:20 -0200
Message-ID: <[EMAIL PROTECTED]>
From: "Jared Riddle" <[EMAIL PROTECTED]>
Reply-To: "Jared Riddle" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: *****SPAM***** I chose life instead of fa_t q
Date: Tue, 25 Nov 2003 23:53:20 GMT
X-Mailer: AOL 7.0 for Windows US sub 118
MIME-Version: 1.0
X-Security: MIME headers sanitized on ns.sdsitehosting.net
See http://www.impsec.org/email-tools/sanitizer-intro.html
for details. $Revision: 1.139 $Date: 2003-09-07 10:14:23-07
Content-Type: multipart/alternative;
boundary="9_BB_3D072_.F4CA5.F"
X-Priority: 3
X-MSMail-Priority: Normal
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
ns.sdsitehosting.net
X-Spam-Report:
* 1.1 FROM_NUM_AT_WEBMAIL From address is webmail, but starts
with a
+number
* 0.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match
'Received'
+headers
* 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
* [66.68.241.177 listed in dnsbl.sorbs.net]
* 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
+bl.spamcop.net
* [Blocked - see
<http://www.spamcop.net/bl.shtml?66.68.241.177>]
* 2.5 RCVD_IN_DYNABLOCK RBL: Sent directly from dynamic IP
address
* [Dynamic/Residential IP range listed by]
[easynet.nl DynaBlock -
<http://dynablock.easynet.nl/errors.html>]
On this box, I'm using SORBS, SpamCop, and Dynablock, among others. I
know they work... I can look through the logs and see hundreds of denied
connections. So, why did this piece of mail make it through sendmail to
SpamAssassin? I don't see how SpamAssassin could be causing it, but...
I know my dnsbls *are* working.
--
John Oliver, CCNA http://www.john-oliver.net/
Linux/UNIX/network consulting http://www.john-oliver.net/resume/
* * * * * * * * * * * * * * *
Contribute to the SpamCon Legal Fund!! http://www.spamcon.org/legalfund/
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
