Microsoft Office Outlook 11. Wow, I didn't know it sucks *that* badly. No proper threading headers (In-Reply-To and References), produces fugly Kammquoting, and even injects an empty line after each and every line of text. And *then* converts that monstrosity into HTML, preserving the utterly broken format.
Next time, please do as you did with your previous reply. Thanks. On Thu, 2009-09-17 at 16:04 -0400, Philippe Ratté wrote: > > Ok, slow down. What rules *exactly* are hitting on these messages? > > See below No answer to that, but see below. :) > > A SORBS listing does NOT explain why your customer doesn't get his mail. > > You wouldn't happen to run RBL checks at SMTP stage, prior to SA, that > > outright block based on a single BL hit? > > This is true, I forgot to mention a very important detail. Mail was > getting blocked by another program named rblsmtpd at SMTP stage. > > I found the way to skip DNSBL checks for a particular IP in rblsmtpd, > but not into SpamAssassin. The reason why I wanted to do the same > thing into SA was to ensure that it would not be blocked at this stage > and tell my customer that Hotmail is white listed. Not blacklisting is not the same as whitelisting. > Found the reason (rblsmtpd). I did not know how SA handled DNSBL so > maybe simply removing it from rblsmtpd would be enough. Yes, indeed. As I explained previously, the SA score for any SORBS hit is not sufficient to push it over a sane spam score threshold, let alone a typically higher threshold to reject based on the SA score. *IFF* you reject based on SA at all. FWIW, SA handles DNSBLs like every other rule -- it scores it. SA is a scoring system, and by default and design no one rule hit is sufficient to push it over the spam threshold single-handedly. So again, yes -- not having rblsmtpd block mail on SORBS should already be enough. Even if SA still scores it, it should be fine. If, however, there *might* be potential for SA flagging these mail as spam with a SORBS hit -- which requires other rules to also hit on these mail and account for 80+ % of the score -- we won't know until you show us the SA rules hit. As I requested before. > I like John's idea : > > meta NO_RBL_HOTMAIL RBL_SORBS && FROM_HOTMAIL > score NO_RBL_HOTMAIL -2 The idea was actually mentioned by me, but oh well. ;) > Can you help me writing these ? Well, here are two UNTESTED and ad-hoc written rules, to be used in a meta as I previously outlined. The first IP variant in this case matches an entire /24 network, the RDNS variant matches any Hotmail blu0 host. Both are pretty much examples and likely need to be adjusted. header HOTMAIL_IP_TO_MX X-Spam-Relay-Untrusted =~ /^\[ ip=65\.55\.111\./ header HOTMAIL_RDNS_TO_MX X-Spam-Relay-Untrusted =~ /^\[ [^\]]+ rdns=[^ ]+\.blu0\.hotmail\.com / Also, see the docs. http://wiki.apache.org/spamassassin/WritingRules http://wiki.apache.org/spamassassin/TrustedRelays However, I still do not believe this to be necessary. Moreover, I don't think assigning any negative score to hotmail, solely based on that fact is a good idea. You mentioned it yourself -- you *do* get spam from hotmail. Thus, if you really feel like you need white- listing, I'd recommend whitelist_from_rcvd or friends instead. guenther -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}