Hi - We are receiving mail from a site that includes the headers:

Received: from mail1.xxxx.com (mail.xxxx.com [xx.xx.xx.xx])
        by psfcsv1.psfc.mit.edu (8.13.1/8.13.1) with ESMTP id j9IM7qTG018418
        for <[EMAIL PROTECTED]>; Tue, 18 Oct 2005 18:07:52 -0400
Received: from adsl-xx-xx-xx-xx.dsl.pltn13.pacbell.net [xx.xx.xx.xx] by
        mail1.xxxx.com with SMTP;   Tue, 18 Oct 2005 15:36:54 -0600

This causes spamassassin to flag it with:

HELO_DYNAMIC_DHCP  HELO_DYNAMIC_HCC  HELO_DYNAMIC_IPADDR

This easily causes a very high spam score. I've never seen these tests be positive for non-spam mail. That last Received line definitely looks suspicious, but it's real. The rest of the header follows. Is this a deranged mail server, or is spamassassin at fault? Thanks. - Mark


Date: Tue, 18 Oct 2005 14:36:54 -0700
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_009F_01C5D3F1.633A6E80"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2616
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
In-Reply-To: <[EMAIL PROTECTED]>
X-Declude-Spoolname: 424328766399.EML
X-Declude-Note: Scanned by Declude 2.0.6.16 (http://www.declude.com/x-note.htm)
for spam.
X-Declude-Scan: Score [-5] at 15:37:16 on 18 Oct 2005
X-Declude-Fail: None
X-Country-Chain: UNITED STATES->destination
X-NOTE: hpcsystems.com
X-Scanned-By: MIMEDefang 2.45

Reply via email to