Mark London wrote:
Hi - We are receiving mail from a site that includes the headers:
Received: from mail1.xxxx.com (mail.xxxx.com [xx.xx.xx.xx])
by psfcsv1.psfc.mit.edu (8.13.1/8.13.1) with ESMTP id
j9IM7qTG018418
for <[EMAIL PROTECTED]>; Tue, 18 Oct 2005 18:07:52 -0400
Received: from adsl-xx-xx-xx-xx.dsl.pltn13.pacbell.net [xx.xx.xx.xx] by
mail1.xxxx.com with SMTP; Tue, 18 Oct 2005 15:36:54 -0600
This causes spamassassin to flag it with:
HELO_DYNAMIC_DHCP HELO_DYNAMIC_HCC HELO_DYNAMIC_IPADDR
This easily causes a very high spam score. I've never seen these tests
be positive for non-spam mail. That last Received line definitely looks
suspicious, but it's real. The rest of the header follows. Is this a
deranged mail server, or is spamassassin at fault? Thanks. - Mark
You obfuscated all of the network addresses required to produce an
intelligent response. You also didn't say at (after) which host
(received header) the mail is being scanned.
Daryl
