On Friday 25 February 2011 10:29:08 Ned Slider wrote:
<snip>
> > 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
> >
> > [78.55.199.104 listed in zen.spamhaus.org]
>
> That looks to be your main problem right there - don't deep parse
> Received headers against Spamhaus PBL, only check lastexternal
> addresses, as this will cause a large number of false positives.
It's the default ruleset and it checks only the lastexternal address. See:
# /var/lib/spamassassin/3.003001> grep -R RCVD_IN_PBL *
updates_spamassassin_org/20_dnsbl_tests.cf:header RCVD_IN_PBL
eval:check_rbl('zen-lastexternal', 'zen.spamhaus.org.', '127.0.0.1[01]')
But thanks for the hint. I didn't know before that such a option exists.
Regards
Stefan
