Andrew Hearn wrote:
Hello,
I'm not sure why DOS_OE_TO_MX fired on this message, as the headers say
it was delivered to b.painless.aaisp.net.uk which relayed it on to
z.hopeless.aaisp.net.uk.
b.painless isn't the MX for the domain...
SA support for IPv6 is currently non-existent so the top most received
header is ignored.
Any ideas? -Thanks!
Only use IPv4 for your MX(es). Not only did it cause a problem in this
case, but all of your incoming spam is scoring lower than it should
since SA is not able to do DNSBL tests on the connecting relays.
Daryl
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Fri, 14 Dec 2007 11:45:39 +0000
Received: from [2001:8b0:0:81::51bb:5134] (helo=b.painless.aaisp.net.uk)
by z.hopeless.aaisp.net.uk with esmtp (Exim 4.63)
(envelope-from <[EMAIL PROTECTED]>)
id 1J38z2-0004B8-FV
for [EMAIL PROTECTED]; Fri, 14 Dec 2007 11:45:39 +0000
Received: from [217.169.3.9] (helo=DFTJ542J)
by b.painless.aaisp.net.uk with smtp (Exim 4.62)
(envelope-from <[EMAIL PROTECTED]>)
id 1J38z2-00036f-7g
for [EMAIL PROTECTED]; Fri, 14 Dec 2007 11:45:36 +0000
Message-ID: <[EMAIL PROTECTED]>
From: "Fiona Murphy" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: website emergency!
Date: Fri, 14 Dec 2007 11:45:33 -0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_00AF_01C83E46.D5CB6A50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
X-Virus-Scanned: Clear (Version: ClamAV 0.91.2/5116/Fri Dec 14 07:14:39
2007, by smtp.aaisp.net.uk)
X-AA-SMTP-Time-Scanned:YES
X-Spam-Score: 4.0 ++++
X-AASpam-Report: Spam detection software, running on the system
"b.spamless.aaisp.net.uk", has
processed this message.
This message scored (4.0 points and 4.6 are required to mark as spam)
pts rule name description
---- ----------------------
--------------------------------------------------
1.2 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5071]
0.0 NO_VIRUS_FOUND There were no viruses found in this message
by ClamAV
2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers
