All,I might be wrong here, but there is only 1 received line. Since you stated you are using your ISP's SMTP gateway, can I assume that smtp.ntlworld.com is your ISPs SMTP relay? If so, it seems that your ISP is the one marking this email as spam? I'm confused here because there is only 1 received line. Another point of confusion, isn't dynablock.easynet.nl now dead? I don't believe anything should be matching a dynablock lookup. Have a look at http://dynablock.easynet.nl. What's SA up to here if it's matching dynablock lookups?
[Hoping this gets through, and isn't blocked by SpamAssassin on another server!!]
I've been trying to work this one out for a few days now - I run various mailman lists, and recently all my mail has been rejected when I've attempted to post to them. I use Sendmail, Amavis-new (via milter), Clamd and SpamAssassin on the server (paranoid, me?!), and have investigated a little...
A full example message quarantined by the server is reproduced below (I know I shouldn't post spam to this list, but then this isn't actually spam!). The problem appears to be down to the DYNABLOCK list recently taken over by SORBS.
From previous discussions on this list, I was under the impression that the DYNABLOCK list should be used as a filter *only* where a listed IP is sending mail directly to a recipient server. I am using (as always) my ISP's SMTP relays, and so don't believe SA should be using DYNABLOCK. This is confirmed by SORBS' assertion that dynamically-addressed users should always use their ISP's SMTP relays.
Can anyone tell me whether SpamAssassin is using DYNABLOCK incorrectly, or if there may be something wrong with my configuration? Up until now, the 6.3 tag/kill threshold has worked well, and I don't really want to have to increase it if I don't need to.
All .cf files are up-to-date...
Many thanks in advance for any advice.
---------------------------- Begin Quarantined Mail ----------------------------
Return-Path: <My Address> Delivered-To: spam-quarantine X-Envelope-To: <[EMAIL PROTECTED]> X-Quarantine-id: <spam-e6e3c7ca3e872bdeea15c3f8232ee8b9-20031220-034955-XXlea4lS> Received: from Minstrel ([82.0.67.38]) by mta07-svc.ntlworld.com (InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>; Sat, 20 Dec 2003 03:50:23 +0000 Reply-To: <My Address> From: "My Name" <My Address> To: <[EMAIL PROTECTED]> Subject: Test Message Date: Sat, 20 Dec 2003 03:50:27 -0000 Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal X-Spam-Status: Yes, hits=12.6 tag1=3.0 tag2=6.3 kill=6.3 tests=AWL, RCVD_IN_DYNABLOCK, RCVD_IN_SORBS X-Spam-Level: *************
Only intended to produce SA rejection...
-- Peter SJF Bance CEng MBCS CESG and BCS Listed Security Adviser http://www.minstrel.org.uk/
----------------------------- End Quarantined Mail
-----------------------------
As far as the SORBS match, that is probably due to your IP of 82.0.67.28 being listed, and there only being 1 received line. SA always ignores the first received line, except in the case where there is only 1 received line. I know there was a bug in the previous version of SA (2.60) where it wasn't ignoring the first received line, but believe that has been fixed in 2.61. Anyone please correct me if I'm wrong.
Chris
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
