Hello, I am getting these hits with the email below:
AWL, FH_HELO_ALMOST_IP, HELO_DYNAMIC_SPLIT_IP, RCVD_IN_PBL Problem is in this "Received": Received: from 80.Red-88-31-96.staticIP.rima-tde.net ([88.31.96.80]) by owa1.cnio.es with Microsoft SMTPSVC(6.0.3790.3959); Tue, 17 Jun 2008 17:18:10 +0200 Client in IP address 88.31.96.80 is sending mail using SMPT-Auth to "owa1.cnio.es", so this header is right. Problem is that SA is analyzing this "Received" and complaining about it as it is a dynamic IP address or so. Any way to solve this problem? # spamassassin < test Received: from localhost by flash2.cnio.es with SpamAssassin (version 3.2.5); Tue, 17 Jun 2008 18:04:15 +0200 From: john doe <[EMAIL PROTECTED]> To: Any One <[EMAIL PROTECTED]> Subject: spam: Re: [Fwd: [Fwd: Delivery Status Notification (Failure)]] Date: Tue, 17 Jun 2008 17:18:02 +0200 Message-Id: <[EMAIL PROTECTED]> X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on flash2.cnio.es X-Spam-Level: ******** X-Spam-Status: Yes, score=8.0 required=5.0 tests=AWL,FH_HELO_ALMOST_IP, HELO_DYNAMIC_SPLIT_IP,RCVD_IN_PBL,RDNS_NONE autolearn=no version=3.2.5 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------=_4857E07F.6924E393" This is a multi-part message in MIME format. ------------=_4857E07F.6924E393 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit This Email has been identified as spam. The original message has been attached to this so you can view it (if it isn't spam). Content analysis details: (8.0 points, 5.0 required) -------------------- Este Email ha sido identificado como spam. El mensaje original ha sido adjuntado a esta notificacia su visualizaci caso de que no sea spam). Detalles del an?sis de contenido: (8.0 points, 5.0 required) ------------=_4857E07F.6924E393 Content-Type: message/rfc822; x-spam-type=original Content-Description: original message before SpamAssassin Content-Disposition: inline Content-Transfer-Encoding: 8bit Received: from owa1.cnio.es (owa1.cnio.es [192.168.10.7]) by flash2.cnio.es (ESMTP Server) with ESMTP for <[EMAIL PROTECTED]>; Tue, 17 Jun 2008 17:18:15 +0200 (CEST) Received: from 80.Red-88-31-96.staticIP.rima-tde.net ([88.31.96.80]) by owa1.cnio.es with Microsoft SMTPSVC(6.0.3790.3959); Tue, 17 Jun 2008 17:18:10 +0200 Message-ID: <[EMAIL PROTECTED]> Date: Tue, 17 Jun 2008 17:18:02 +0200 From: john doe <[EMAIL PROTECTED]> User-Agent: Thunderbird 2.0.0.14 (Macintosh/20080421) MIME-Version: 1.0 To: Any One <[EMAIL PROTECTED]> Subject: Re: [Fwd: [Fwd: Delivery Status Notification (Failure)]] Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit some text ------------=_4857E07F.6924E393-- Regards, Carlos Velasco