John Stimson via users skrev den 2022-12-26 21:44:
My second question is where to report an SMTP server that passes SPF,
but is passing spam with forged Received headers.
Here's an example header:
Received: from aznavrchol.cz (unknown [85.204.116.245])
by idsfa.net (Postfix) with ESMTP id 2EF948C00FC
for <j...@idsfa.net>; Sun, 22 May 2022 20:12:15 -0700 (PDT)
this is not listed in dnswl.org
https://multirbl.valli.org/lookup/85.204.116.245.html
have you setup trusted_networks, internal_networks, msa_networks correct
in spamassassin ?
if you can confirm it uses other headers for dnswl.org then remove this
headers before spamassassin see it, thats the forged header imho X-* and
friends there :=)