Greetings,
   I had the following headers:
----
Return-path: <[EMAIL PROTECTED]>
Envelope-to: ler@lerctr.org
Delivery-date: Thu, 07 Dec 2006 23:26:40 -0600
Received: from smtp-vbr15.xs4all.nl ([194.109.24.35]:2793)
        by thebighonker.lerctr.org with esmtp (Exim 4.63 (FreeBSD))
        (envelope-from <[EMAIL PROTECTED]>)
        id 1GsYFo-000OEi-SQ
        for ler@lerctr.org; Thu, 07 Dec 2006 23:26:40 -0600
Received: from bag.python.org (bag.python.org [194.109.207.14])
        by smtp-vbr15.xs4all.nl (8.13.8/8.13.8) with ESMTP id kB85QZZo098068
        for <ler@lerctr.org>; Fri, 8 Dec 2006 06:26:35 +0100 (CET)
        (envelope-from [EMAIL PROTECTED])
Received: from bag.python.org (bag [127.0.0.1])
        by bag.python.org (Postfix) with ESMTP id 4397A1E4019
        for <ler@lerctr.org>; Fri,  8 Dec 2006 06:26:35 +0100 (CET)
X-Original-To: mailman-users@python.org
Delivered-To: [EMAIL PROTECTED]
Received: from bag.python.org (bag [127.0.0.1])
        by bag.python.org (Postfix) with ESMTP id 646CA1E401A
        for <mailman-users@python.org>; Fri,  8 Dec 2006 06:26:07 +0100
(CET)
X-Spam-Status: OK 0.010
Received: from bag (HELO bag.python.org) (127.0.0.1)
        by bag.python.org with SMTP; 08 Dec 2006 06:26:06 +0100
X-Greylist: delayed 665 seconds by postgrey-1.21 at bag.python.org;
        Fri, 08 Dec 2006 06:26:06 CET
Received: from zoot.lafn.org (zoot.lafn.ORG [206.117.18.6])
        by bag.python.org (Postfix) with ESMTP
        for <mailman-users@python.org>; Fri,  8 Dec 2006 06:26:06 +0100
(CET)
Received: from 207.233.32.18 (zoot.lafn.org [206.117.18.6])
        by zoot.lafn.org (8.13.6/8.13.4) with SMTP id kB85EuSN093511
        for <mailman-users@python.org>; Thu, 7 Dec 2006 21:14:58 -0800 (PST)
        (envelope-from [EMAIL PROTECTED])
Message-Id: <[EMAIL PROTECTED]>
To: mailman-users@python.org
From: [EMAIL PROTECTED]
Date: Thu, 7 Dec 2006 21:14:58 GMT
X-Mailer: Endymion MailMan Standard Edition v3.0.26
X-Virus-Scanned: by XS4ALL Virus Scanner
X-Virus-Status: Clean
Subject: [Mailman-Users] Mailman stop delivering ... problem with
        Approval.py?
X-BeenThere: mailman-users@python.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Mailman mailing list management users <mailman-users.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/listinfo/mailman-users>,
        <mailto:[EMAIL PROTECTED]>
List-Archive: <http://mail.python.org/pipermail/mailman-users>
List-Post: <mailto:mailman-users@python.org>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <http://mail.python.org/mailman/listinfo/mailman-users>,
        <mailto:[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
X-Spam-Score: 6.4 (++++++)
X-LERCTR-Spam-Score: 6.4 (++++++)
X-Spam-Report: (6.4 points, 5.0 required)
        BAYES_00=-2.599 DATE_IN_PAST_06_12=0.827 DK_POLICY_SIGNSOME=0.001
FORGED_RCVD_HELO=0.135 HOST_EQ_NL=1.545 NO_REAL_NAME=0.961
RCVD_HELO_IP_MISMATCH=4 RCVD_NUMERIC_HELO=1.5 TW_CF=0.077
X-LERCTR-Spam-Report: (6.4 points, 5.0 required)
        BAYES_00=-2.599 DATE_IN_PAST_06_12=0.827 DK_POLICY_SIGNSOME=0.001
FORGED_RCVD_HELO=0.135 HOST_EQ_NL=1.545 NO_REAL_NAME=0.961
RCVD_HELO_IP_MISMATCH=4 RCVD_NUMERIC_HELO=1.5 TW_CF=0.077
X-Spam-Flag: YES
X-LERCTR-Spam-Flag: YES
DomainKey-Status: no signature
----
And the rule that marked this as SPAM is the RCVD_HELO_IP_MISMATCH.

Why is this rule so high?

What exactly is it checking?

This is from a legit mailing list. 

Thanks,
Larry Rosenman 


-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 512-248-2683             E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893

Reply via email to