Hi - We are receiving mail from a site that includes the headers:
Received: from mail1.xxxx.com (mail.xxxx.com [xx.xx.xx.xx])
by psfcsv1.psfc.mit.edu (8.13.1/8.13.1) with ESMTP id j9IM7qTG018418
for <[EMAIL PROTECTED]>; Tue, 18 Oct 2005 18:07:52 -0400
Received: from adsl-xx-xx-xx-xx.dsl.pltn13.pacbell.net [xx.xx.xx.xx] by
mail1.xxxx.com with SMTP; Tue, 18 Oct 2005 15:36:54 -0600
This causes spamassassin to flag it with:
HELO_DYNAMIC_DHCP HELO_DYNAMIC_HCC HELO_DYNAMIC_IPADDR
This easily causes a very high spam score. I've never seen these
tests be positive for non-spam mail. That last Received line
definitely looks suspicious, but it's real. The rest of the header
follows. Is this a deranged mail server, or is spamassassin at
fault? Thanks. - Mark
Date: Tue, 18 Oct 2005 14:36:54 -0700
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_009F_01C5D3F1.633A6E80"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2616
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
In-Reply-To: <[EMAIL PROTECTED]>
X-Declude-Spoolname: 424328766399.EML
X-Declude-Note: Scanned by Declude 2.0.6.16 (http://www.declude.com/x-note.htm)
for spam.
X-Declude-Scan: Score [-5] at 15:37:16 on 18 Oct 2005
X-Declude-Fail: None
X-Country-Chain: UNITED STATES->destination
X-NOTE: hpcsystems.com
X-Scanned-By: MIMEDefang 2.45