Jdow wrote on Wed, 7 Dec 2005 20:44:14 -0800: > From: <[EMAIL PROTECTED]> > > On 12/7/05, Kai Schaetzl <[EMAIL PROTECTED]> wrote: > > Not an incorrect format, but probably a format that SA mismatches, yes. > > Looking at the rules (which look rather complex, so I may misinterpet it) > > it seems it matches on the "dsl" part and on the IP address of the header > > line instead of the HELO string. What's that MTA? Exim, Qmail? > > The MTA is sendmail, but actually the Received: header is added by > Mail Avenger (an SMTP server that runs the mail through spamassassin > before passing it to sendmail).
oops, did your OE switch off the quoting or was there some intention behind that I don't get? > David, as Kai has tried to point out a couple times now, their > reverse DNS record is not EVER going to get past dialup list detection. I think you are in the wrong thread or you mean Matt who did it *once* ;-) What you mention may indeed be a problem(*) but it's not what these rules fire on. (*) Actually, that mail could have been delivered via SMTP AUTH directly to scs.stanford.edu, so it may be quite legitimate. If it's not delivering via SMTP AUTH the incorrect HELO "genstor.com" can be a problem as well, it's highly unlikely that a host with only one dot exists, my mail server would reject it. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com