Yves Goergen wrote:
[snip]
The message is a reply to a message from me. It contains my text quoted,
complete with my previous signature that also has the link to
http://unclassified.de. I was a bit surprised about the high spam score
of 5.0 and looked at the report. It says that "unclassified.de" is on
URIBL. I could not believe that and checked in at their site. But they
say it is *not* on the list. So what happened here? How can SA (3.2.4)
give spam points for a problem that is completely wrong?
on the host running SA, try
$ host 1.0.0.127.zen.spamhaus.org
if this returns an IP instead of NXDOMAIN, then you have a DNS problem.
either you're using a "toy" dns server/proxy or you are forwarding DNS
queries to your ISP and the ISP replaces NXDOMAIN by an IP or their choice.