Michael Scheidell <michael.scheid...@secnap.com> wrote on 08/23/2010 
11:59:06 AM:

> you will need to provide more information.
> 
> post ALL the headers, and state which one is the last untrusted received 

> header.

Here is what I see in the Exim reject log.  I'm not sure quite what you 
mean by "last untrusted received header".  The last received header is the 
one added by my host.  The one prior to that was added by an untrusted 
host.

Keep in mind, however, that the issue isn't that I'm getting a fail.  I'm 
expecting it to fail.  The issue is that I'm getting a hard fail instead 
of a soft fail as specified by the SPF record.

Neil

---

2010-08-22 21:22:30 1OnLk4-0005H0-MS H=server70a.appriver.com 
(server70.appriver.com) [69.20.116.35] F=<mmccutch...@nawilliams.com> 
rejected after DATA: Message scored 12.8 spam points.
Envelope-from: <mmccutch...@nawilliams.com>
Envelope-to: <stukus.da...@tatravelcenters.com>
P Received: from server70a.appriver.com ([69.20.116.35] 
helo=server70.appriver.com)
        by lnxsrv4.ta.com (envelope-from
        <mmccutch...@nawilliams.com>)
        with smtp (Exim 4.71)
        id 1OnLk4-0005H0-MS
        for stukus.da...@tatravelcenters.com; Sun, 22 Aug 2010 21:22:29 
-0400
  X-Note-AR-ScanTimeLocal: 8/22/2010 9:22:41 PM
  X-Policy: GLOBAL - nawilliams.com
  X-Primary: mmccutch...@nawilliams.com
  X-Note: This Email was scanned by AppRiver SecureTide
  X-ALLOW: @nawilliams.com ALLOWED
  X-Virus-Scan: V-
  X-Note: Spam Tests Failed: 
  X-Country-Path: PRIVATE->UNITED STATES->UNITED STATES
  X-Note-Sending-IP: 69.15.41.219
  X-Note-Reverse-DNS: 
  X-Note-WHTLIST: mmccutch...@nawilliams.com
  X-Note: User Rule Hits: 
  X-Note: Global Rule Hits: G202 G203 G204 G205 G209 G210 G221 G309 
  X-Note: Encrypt Rule Hits: 
  X-Note: Mail Class: ALLOWEDSENDER
  X-Note: Headers Injected
P Received: from [69.15.41.219] (HELO nawatl01.NAWATL.local)
  by server70.appriver.com (CommuniGate Pro SMTP 5.3.7)
  with ESMTP id 142957128 for stukus.da...@tatravelcenters.com; Sun, 22 
Aug 2010 21:22:40 -0400
P Received: from 10.2.18.2 ([10.2.18.2]) by nawatl01.NAWATL.local 
([10.2.18.2]) with Microsoft Exchange Server HTTP-DAV ;
 Mon, 23 Aug 2010 01:22:36 +0000
  Subject: Re: Requested Information
  References: 
<fc419b3cb698ac4d823457a3ad28916dda3...@nawatl01.nawatl.local> 
<231136984.81985.1282236522847.javamail.r...@sz0052a.emeryville.ca.mail.comcast.net>
 
<off8754b0b.71f4a035-on86257784.005c78bb-86257784.005d4...@localdomain> 
<of2aa0e4a3.6dbd97f9-on85257788.0002aac5-85257788.00065...@tatravelcenters.com>
F From: "Mike McCutcheon" <mmccutch...@nawilliams.com>
  Content-Type: multipart/alternative;
        boundary="Apple-Mail-12--723357858";
        charset="iso-8859-1"
  In-Reply-To: 
<of2aa0e4a3.6dbd97f9-on85257788.0002aac5-85257788.00065...@tatravelcenters.com>
  thread-topic: Requested Information
  thread-index: ActCYatDdxF4uzGMQ9iA9XjNGJDdRQ==
I Message-ID: <924972f2-c728-46b8-a6b9-3ca24c7ba...@nawilliams.com>
  Date: Sun, 22 Aug 2010 20:21:59 -0500
T To: <stukus.da...@tatravelcenters.com>
  Content-Transfer-Encoding: 7bit
  MIME-Version: 1.0 (iPhone Mail 8A400)
  X-Spam-Score: 12.8 (++++++++++++)
  X-Spam-Report: Content analysis details:   (12.8 points, 7.0 required)
 
  pts rule name              description
 ---- ---------------------- 
--------------------------------------------------
   20 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see 
http://www.openspf.org/Why?s=mfrom;id=mmccutcheon%40nawilliams.com;ip=69.20.116.35;r=lnxsrv4.ta.com
]
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
  0.0 MIME_QP_LONG_LINE      RAW: Quoted-printable line longer than 76 
chars
 -5.3 AWL                    AWL: From: address is in the auto white-list

Reply via email to